@neta-art/cohub-cli 8.0.1 → 8.1.1

package/README.md

@@ -85,26 +85,21 @@ COHUB_SPACE_ID=<spaceId> cohub spaces prompt "message" --json
 Connect one local workspace to a Space and select Pi or Codex per turn.
 
 To keep using native terminals with ordinary Cohub Chats / Turns:
-使用原生终端，并同步到普通 Cohub Chat / Turn：
 
 ```bash
 cohub runtime up -d --harness pi --harness codex
-cohub runtime attach --harness pi --harness codex
-# Reload Pi / restart Codex and approve its hook trust prompt.
-# 重载 Pi / 重启 Codex，并审核 Hook 信任提示。
-cohub runtime detach --harness pi --harness codex # Pause; retain data / 暂停，保留数据
+# Answer the native sync consent (default yes), then reload Pi / restart Codex
+# and approve its hook trust prompt.
+cohub runtime detach --harness pi --harness codex # Pause; retain data
 ```
 
-`attach` explicitly authorizes this project's opened conversation history and raw native archives.
-The Runtime Supervisor is the single local Daemon: Pi / Codex integrations use its private IPC,
+`up` installs native sync by default after one explicit consent (default yes); declining or a
+capability failure keeps the Runtime running without it, and `up` is idempotent. The Runtime
+Supervisor is the single local Daemon: Pi / Codex integrations use its private IPC,
 while native Turn events use the existing Runtime WebSocket. Configuration is backed up, existing
 Runtime bindings are reused, and competing continuations fork at complete Turns without blocking native work. Requires Pi 0.85.1+ or Codex with stable
 Hooks enabled. User-level integrations remain inert outside opted-in directories. See
-[boundaries and privacy](../../docs/local-runtime.md#native-clients--原生客户端).
-
-`attach` 明确授权上传当前项目打开的对话历史与原生归档；复用现有绑定，配置修改前备份。
-冲突时按完整 Turn 分支，不阻塞本地执行。用户级集成在未授权目录中不会采集数据。
-
+[boundaries and privacy](../../docs/local-runtime.md#native-clients).
 
 ```bash
 cohub runtime up ./project --harness pi --harness codex
@@ -142,10 +137,6 @@ local process and remote component status. `down` retains all data and requires
 when executions remain unconfirmed. `logs --level warn --follow` shows sensitive events;
 foreground startup prints these automatically. Runtime commands never fall back to Home.
 
-普通使用只需 `cohub runtime up`，首次提示新建，后续优先复用。`-n` 是 `--new` 的简写，
-`--name` 单独指定名称。`-d` 后台运行并返回链接、PID 和日志位置；`down` 停止但保留所有数据。
-断网及临时凭证错误自动重试；断连不代表任务已停止，也不会自动重跑工具。
-
 ## Chats and prompts
 
 Use `spaces prompt` for immediate sends, delayed sends, one-time schedules, recurring schedules, new Chats, and existing Chats.

package/dist/commands/app-commerce.js

@@ -1,6 +1,6 @@
 import { resolveExecutionAppId, } from "@neta-art/cohub";
 import { createClient } from "../client.js";
-import { error, handleHttp, json as outJson, jsonRequested, ok, table } from "../output.js";
+import { error, formatLocalDateTime, handleHttp, json as outJson, jsonRequested, ok, table } from "../output.js";
 function collectOption(value, previous = []) {
     return [...previous, value];
 }
@@ -69,7 +69,7 @@ function printOrder(order) {
         { key: "status", label: "Status" },
         { key: "amount", label: "Amount" },
         { key: "paid", label: "Paid" },
-        { key: "created", label: "Created" },
+        { key: "created", label: "Created", format: formatLocalDateTime },
         { key: "paidAt", label: "Paid At" },
     ]);
 }

package/dist/commands/me.js

@@ -1,5 +1,5 @@
 import { createClient } from "../client.js";
-import { handleHttp, json as outJson, jsonRequested, table } from "../output.js";
+import { formatLocalDateTime, handleHttp, json as outJson, jsonRequested, table } from "../output.js";
 function parseInteger(value, name, min) {
     const parsed = Number.parseInt(value, 10);
     if (!Number.isSafeInteger(parsed) || parsed < min) {
@@ -70,7 +70,7 @@ export function registerMe(program) {
             });
             if (jsonRequested(opts))
                 return outJson(activity);
-            console.log(`\n  ${activity.range.from} → ${activity.range.to}`);
+            console.log(`\n  ${formatLocalDateTime(activity.range.from)} → ${formatLocalDateTime(activity.range.to)}`);
             table([activity.summary], [
                 { key: "totalTokens", label: "Tokens" },
                 { key: "costTotal", label: "Cost ($)" },

package/dist/commands/references.js

@@ -1,6 +1,6 @@
 import { isUuid, } from "@neta-art/cohub";
 import { createClient } from "../client.js";
-import { table, json as outJson, jsonRequested, error, handleHttp } from "../output.js";
+import { formatLocalDateTime, table, json as outJson, jsonRequested, error, handleHttp } from "../output.js";
 const RESOURCE_TYPES = new Set([
     "turn",
     "session",
@@ -104,7 +104,7 @@ Examples:
                 source: `${r.sourceType}:${r.sourceId.slice(0, 8)}`,
                 target: formatTarget(r.targetType, r.targetId),
                 count: r.count,
-                lastSeen: r.updatedAt.slice(0, 10),
+                lastSeen: formatLocalDateTime(r.updatedAt).slice(0, 10),
             }));
             table(rows, [
                 { key: "kind", label: "Kind" },

package/dist/commands/runtime.d.ts

@@ -1,3 +1,15 @@
 import type { Command } from "commander";
+import { type NativeIpcResponse } from "../runtime/native-ipc.js";
 export { resolveLocalSpaceName, parseRuntimeHarnesses } from "../runtime/launch.js";
+export declare function applyNativeImportResponse(result: {
+    imported: number;
+    failed: Array<{
+        path: string;
+        message: string;
+    }>;
+    skipped: Array<{
+        path: string;
+        message: string;
+    }>;
+}, path: string, response: NativeIpcResponse): void;
 export declare function registerRuntime(program: Command): void;

package/dist/commands/runtime.js

@@ -1,14 +1,15 @@
 import { setTimeout as delay } from "node:timers/promises";
-import { createInterface } from "node:readline/promises";
 import { createClient } from "../client.js";
 import { json as outJson, jsonRequested } from "../output.js";
 import { currentIdentityKey } from "../space.js";
 import { resolveRuntimeTarget, runtimeUp, parseRuntimeHarnesses } from "../runtime/launch.js";
 import { canonicalRuntimeRoot, getRuntimeSpaceBinding } from "../runtime/space-binding.js";
 import { installNativeSync } from "../runtime/native-install.js";
+import { discoverNativeImportCandidates, nativeRuntimeRoot, readNativeSyncConfig } from "../runtime/native-sync.js";
 import { listNativeSyncStores } from "../runtime/native-sync-store.js";
+import { requestNativeDaemon } from "../runtime/native-ipc.js";
 import { requestRuntimeInstance, runtimeInstanceDirectory } from "../runtime/instance.js";
-import { atLeastLevel, diagnosticLevels, formatDiagnostic, printRuntimeSummary } from "../runtime/presentation.js";
+import { atLeastLevel, diagnosticLevels, formatDiagnostic, formatNativeSync, printRuntimeSummary } from "../runtime/presentation.js";
 import { RuntimeSessionStore } from "../runtime/session-store.js";
 import { readRuntimeDiagnosticEvents, RuntimeDiagnosticReader, runtimeDiagnosticsDirectory, serializeDiagnosticError } from "../runtime/diagnostics.js";
 export { resolveLocalSpaceName, parseRuntimeHarnesses } from "../runtime/launch.js";
@@ -16,6 +17,16 @@ const reportFailure = (cause) => {
     process.stderr.write(`Runtime failed: ${serializeDiagnosticError(cause).message}\n`);
     process.exitCode = 1;
 };
+export function applyNativeImportResponse(result, path, response) {
+    if (!response.ok) {
+        if (response.skipped) {
+            result.skipped.push({ path, message: response.message });
+            return;
+        }
+        throw new Error(response.message);
+    }
+    result.imported += 1;
+}
 export function registerRuntime(program) {
     const runtime = program.command("runtime").description("Connect a local workspace");
     runtime.command("up [dir]")
@@ -27,7 +38,7 @@ export function registerRuntime(program) {
         .option("--harness <name>", "Pi or Codex; repeatable", (value, previous) => [...previous, value], [])
         .option("--pi <path>", "Pi executable")
         .option("--codex <path>", "Codex executable")
-        .option("-y, --yes", "Accept defaults and authorize local execution")
+        .option("-y, --yes", "Accept defaults and authorize local execution and native sync")
         .option("--verbose", "Show diagnostic details")
         .option("--json", "JSON output")
         .action(async (dir, options) => {
@@ -38,57 +49,156 @@ export function registerRuntime(program) {
             reportFailure(cause);
         }
     });
-    for (const action of ["attach", "detach"])
-        runtime.command(action)
-            .description(action === "attach" ? "Sync native Pi / Codex Turns" : "Pause native sync; retain all receipts")
-            .option("-s, --space <id>", "Target Space")
-            .option("--harness <name>", "Pi or Codex; repeatable", (value, previous) => [...previous, value], [])
-            .option("--pi <path>", "Pi executable for capability checks")
-            .option("--codex <path>", "Codex executable for capability checks")
-            .option("-y, --yes", "Authorize project conversation and native archive uploads")
-            .option("--json", "JSON output")
-            .action(async (options) => {
-            try {
-                const spaceId = await resolveRuntimeTarget(program, options.space);
-                const identity = currentIdentityKey();
-                if (!identity)
-                    throw new Error("Sign in first");
-                const root = await canonicalRuntimeRoot(process.cwd());
-                if (action === "attach" && (await getRuntimeSpaceBinding(root, identity))?.spaceId !== spaceId)
-                    throw new Error("Bind this directory with runtime up --space first");
-                const instance = await requestRuntimeInstance(runtimeInstanceDirectory(identity, spaceId));
-                if (action === "attach" && (!instance || instance.root !== root))
-                    throw new Error("Start this directory's Runtime first: cohub runtime up -d");
-                if (action === "attach" && !instance?.nativeSync)
-                    throw new Error("Restart the Runtime with this CLI before attaching");
-                const harnesses = parseRuntimeHarnesses(options.harness.length ? options.harness : instance?.harnesses ?? ["pi", "codex"]);
-                if (action === "attach" && harnesses.some((harness) => !instance?.harnesses.includes(harness)))
-                    throw new Error("Enable these Harnesses with runtime up first");
-                if (action === "attach" && !options.yes) {
-                    if (!process.stdin.isTTY)
-                        throw new Error("Use --yes to authorize native sync");
-                    const rl = createInterface({ input: process.stdin, output: process.stderr });
-                    try {
-                        const answer = await rl.question(`Install user-level ${harnesses.join(" / ")} integration and upload this project's opened conversations, tool output and raw archives to this Space? History may contain secrets. [y/N] `);
-                        if (!/^y(es)?$/i.test(answer.trim()))
-                            return;
-                    }
-                    finally {
-                        rl.close();
-                    }
-                }
-                const result = await installNativeSync({ root, spaceId, identity, harnesses, disabled: action === "detach", executables: { pi: options.pi, codex: options.codex } });
+    runtime.command("detach")
+        .description("Pause native sync; retain all receipts")
+        .option("-s, --space <id>", "Target Space")
+        .option("--harness <name>", "Pi or Codex; repeatable", (value, previous) => [...previous, value], [])
+        .option("--json", "JSON output")
+        .action(async (options) => {
+        try {
+            const spaceId = await resolveRuntimeTarget(program, options.space);
+            const identity = currentIdentityKey();
+            if (!identity)
+                throw new Error("Sign in first");
+            const root = await canonicalRuntimeRoot(process.cwd());
+            if ((await getRuntimeSpaceBinding(root, identity))?.spaceId !== spaceId)
+                throw new Error("Bind this directory with runtime up first");
+            const instance = await requestRuntimeInstance(runtimeInstanceDirectory(identity, spaceId));
+            const harnesses = parseRuntimeHarnesses(options.harness.length ? options.harness : instance?.harnesses ?? ["pi", "codex"]);
+            const result = await installNativeSync({ root, spaceId, identity, harnesses, disabled: true });
+            if (jsonRequested(options))
+                outJson({ ...result, enabled: false });
+            else
+                process.stdout.write("Native sync paused; all local records retained\n");
+        }
+        catch (cause) {
+            reportFailure(cause);
+        }
+    });
+    runtime.command("import [dir]")
+        .description("Import local conversations")
+        .option("-s, --space <id>", "Target Space")
+        .option("--harness <name>", "Filter by harness; repeatable", (value, previous) => [...previous, value], [])
+        .option("--session <id>", "Filter by native session ID")
+        .option("--dry-run", "Preview without importing")
+        .option("-y, --yes", "Skip confirmation")
+        .option("--json", "Output as JSON")
+        .action(async (dir, options) => {
+        const controller = new AbortController();
+        const stop = () => controller.abort();
+        process.once("SIGINT", stop);
+        process.once("SIGTERM", stop);
+        try {
+            const identity = currentIdentityKey();
+            if (!identity)
+                throw new Error("Sign in first");
+            const root = await canonicalRuntimeRoot(dir ?? process.cwd());
+            const spaceId = await resolveRuntimeTarget(program, options.space);
+            const binding = await getRuntimeSpaceBinding(root, identity);
+            if (!binding || binding.spaceId !== spaceId)
+                throw new Error("Bind this directory with runtime up first");
+            const local = await requestRuntimeInstance(runtimeInstanceDirectory(identity, spaceId));
+            if (!local)
+                throw new Error("Local Runtime is not running");
+            const config = await readNativeSyncConfig(nativeRuntimeRoot(spaceId), identity);
+            if (!config || config.root !== root)
+                throw new Error("Native sync is not enabled for this directory");
+            const harnesses = parseRuntimeHarnesses(options.harness.length ? options.harness : config.harnesses);
+            let lastProgress = 0;
+            const discovered = await discoverNativeImportCandidates(root, harnesses, {
+                signal: controller.signal,
+                onProgress: ({ harness, scanned, candidates: found }) => {
+                    if (jsonRequested(options) || scanned - lastProgress < 25)
+                        return;
+                    lastProgress = scanned;
+                    process.stderr.write(`Scanned ${scanned} ${harness} transcript${scanned === 1 ? "" : "s"}; found ${found}\n`);
+                },
+            });
+            const candidates = discovered.candidates.filter((candidate) => !options.session || candidate.nativeSessionId === options.session);
+            const result = {
+                spaceId, root, harnesses, candidates, errors: discovered.errors,
+                imported: 0, failed: [], skipped: [], dryRun: Boolean(options.dryRun),
+                complete: discovered.errors.length === 0,
+            };
+            if (jsonRequested(options) && options.dryRun) {
+                result.complete = result.complete && result.failed.length === 0;
+                outJson(result);
+                if (!result.complete)
+                    process.exitCode = 1;
+                return;
+            }
+            if (!candidates.length) {
+                if (!result.complete)
+                    process.exitCode = 1;
                 if (jsonRequested(options))
                     outJson(result);
                 else
-                    process.stdout.write(action === "attach"
-                        ? `Native sync enabled. Reload Pi or restart Codex and review its hook trust prompt.\n${result.configPath}\n`
-                        : "Native sync paused; all local records retained\n");
+                    process.stdout.write("No existing native conversations found\n");
+                return;
+            }
+            if (options.dryRun) {
+                if (jsonRequested(options))
+                    outJson(result);
+                else {
+                    process.stdout.write(`Found ${candidates.length} native conversation${candidates.length === 1 ? "" : "s"}\n`);
+                    for (const candidate of candidates)
+                        process.stdout.write(`  ${candidate.harness} ${candidate.nativeSessionId} ${candidate.turnCount} Turn${candidate.turnCount === 1 ? "" : "s"} ${candidate.path}\n`);
+                    for (const error of discovered.errors)
+                        process.stdout.write(`Skipped ${error.path}: ${error.message}\n`);
+                }
+                if (!result.complete)
+                    process.exitCode = 1;
+                return;
+            }
+            if (!options.yes) {
+                if (!process.stdin.isTTY)
+                    throw new Error("Use --yes in non-interactive mode");
+                const { createInterface } = await import("node:readline/promises");
+                const rl = createInterface({ input: process.stdin, output: process.stderr });
+                try {
+                    const answer = await rl.question(`Import ${candidates.length} native conversation${candidates.length === 1 ? "" : "s"} to Space ${spaceId}? [Y/n] `);
+                    if (!/^(|y(es)?)$/i.test(answer.trim())) {
+                        if (jsonRequested(options))
+                            outJson({ ...result, cancelled: true });
+                        else
+                            process.stdout.write("Import cancelled\n");
+                        return;
+                    }
+                }
+                finally {
+                    rl.close();
+                }
             }
-            catch (cause) {
-                reportFailure(cause);
+            for (const candidate of candidates) {
+                try {
+                    const response = await requestNativeDaemon({ harness: candidate.harness, cwd: root, path: candidate.path, nativeSessionId: candidate.nativeSessionId,
+                        sessionStartedAt: candidate.sessionStartedAt, origin: "local_import", settled: true });
+                    applyNativeImportResponse(result, candidate.path, response);
+                }
+                catch (error) {
+                    result.failed.push({ path: candidate.path, message: error instanceof Error ? error.message : String(error) });
+                }
             }
-        });
+            result.complete = result.complete && result.failed.length === 0;
+            if (jsonRequested(options))
+                outJson(result);
+            else {
+                process.stdout.write(`Imported ${result.imported}/${candidates.length} native conversation${candidates.length === 1 ? "" : "s"}\n`);
+                for (const error of [...discovered.errors, ...result.skipped, ...result.failed])
+                    process.stdout.write(`Skipped ${error.path}: ${error.message}\n`);
+                process.stdout.write("Uploads continue in the local Runtime background\n");
+            }
+            if (!result.complete)
+                process.exitCode = 1;
+        }
+        catch (cause) {
+            reportFailure(cause);
+        }
+        finally {
+            process.removeListener("SIGINT", stop);
+            process.removeListener("SIGTERM", stop);
+        }
+    });
     runtime.command("status").description("Local and server status")
         .option("-s, --space <id>", "Target Space")
         .option("--json", "JSON output")
@@ -105,7 +215,9 @@ export function registerRuntime(program) {
                 identity ? listNativeSyncStores(store.root, spaceId, identity) : [],
             ]);
             const nativeSessions = await Promise.all(nativeStores.map((native) => native.status()));
-            const result = { ...remote.value, spaceId, local, remote: remote.value, remoteError: remote.error, diagnosticsPath: runtimeDiagnosticsDirectory(store.root), pendingLocalArchives, failedLocalArchives, nativeSessions };
+            // A corrupt native sync config must never take down the whole status report.
+            const nativeSync = identity ? await readNativeSyncConfig(store.root, identity).then((config) => ({ config, error: null }), (error) => ({ config: null, error: serializeDiagnosticError(error).message })) : { config: null, error: null };
+            const result = { ...remote.value, spaceId, local, remote: remote.value, remoteError: remote.error, diagnosticsPath: runtimeDiagnosticsDirectory(store.root), pendingLocalArchives, failedLocalArchives, nativeSync: nativeSync.config, nativeSyncError: nativeSync.error, nativeSessions };
             if (jsonRequested(options))
                 outJson(result);
             else {
@@ -114,8 +226,7 @@ export function registerRuntime(program) {
                 else
                     process.stdout.write(`Local process  Not running\nSpace  ${spaceId}\nLogs  ${result.diagnosticsPath}\n`);
                 process.stdout.write(`Server  ${remote.error ? `Unknown — ${remote.error}` : remote.value?.online ? "Harness connected" : "Offline"}\nArchives  ${pendingLocalArchives} pending · ${failedLocalArchives} failed\n`);
-                if (nativeSessions.length)
-                    process.stdout.write(`Native chats  ${nativeSessions.length} · ${nativeSessions.reduce((sum, session) => sum + session.pendingTurns, 0)} Turns pending · ${nativeSessions.reduce((sum, session) => sum + session.pendingArchives, 0)} archives pending\n`);
+                process.stdout.write(formatNativeSync(nativeSync.config, nativeSessions, nativeSync.error));
             }
         }
         catch (cause) {

package/dist/commands/sandboxd-binary.d.ts

@@ -1,4 +1,4 @@
-export declare const SANDBOXD_VERSION = "v2.54.1";
+export declare const SANDBOXD_VERSION = "v2.55.0";
 export declare class SandboxdDownloadError extends Error {
     name: string;
 }

package/dist/commands/sandboxd-binary.js

@@ -25,9 +25,10 @@ import { Readable } from "node:stream";
 // v2.54.1 keeps the same wire protocol and adds relay diagnostics: data-channel
 // pairing outlives the runner's dial timeout, dial failures distinguish a
 // timeout from an explicit rejection, and teardown-time websocket write
-// failures log at debug instead of warn. No new capability is required, so this
-// pin is a diagnostics upgrade only.
-export const SANDBOXD_VERSION = "v2.54.1";
+// failures log at debug instead of warn. v2.55.0 republishes that compatible
+// runner alongside the matching platform release; no new runner capability is
+// required.
+export const SANDBOXD_VERSION = "v2.55.0";
 const BINARY_NAME = "cohub-sandboxd";
 // Public CDN prefix hosting the release archives (the repo is private, so the
 // GitHub Release assets are not publicly downloadable). Overridable for staging

package/dist/commands/search.js

@@ -1,6 +1,6 @@
 import { isUuid } from "@neta-art/cohub";
 import { createClient } from "../client.js";
-import { table, json as outJson, jsonRequested, error, handleHttp } from "../output.js";
+import { formatLocalDateTime, table, json as outJson, jsonRequested, error, handleHttp } from "../output.js";
 const DEFAULT_LIMIT = 20;
 const MAX_TITLE_LENGTH = 72;
 const MAX_CONTEXT_LENGTH = 42;
@@ -50,7 +50,7 @@ function rowsFor(items) {
         title: truncate(item.title, MAX_TITLE_LENGTH),
         context: truncate(contextFor(item), MAX_CONTEXT_LENGTH),
         match: item.matchedField,
-        updated: item.updatedAt ? item.updatedAt.slice(0, 10) : "",
+        updated: item.updatedAt ? formatLocalDateTime(item.updatedAt).slice(0, 10) : "",
         href: item.href,
     }));
 }

package/dist/commands/space-commerce.js

@@ -1,5 +1,5 @@
 import { createClient } from "../client.js";
-import { error, handleHttp, json as outJson, jsonRequested, ok, table } from "../output.js";
+import { error, formatLocalDateTime, handleHttp, json as outJson, jsonRequested, ok, table } from "../output.js";
 import { resolveSpace } from "../space.js";
 const PRODUCT_STATUSES = ["draft", "active"];
 const PRODUCT_UPDATE_STATUSES = ["draft", "active", "archived"];
@@ -135,7 +135,7 @@ function printOrders(orders) {
         { key: "product", label: "Product" },
         { key: "status", label: "Status" },
         { key: "amount", label: "Amount" },
-        { key: "created", label: "Created" },
+        { key: "created", label: "Created", format: formatLocalDateTime },
     ]);
 }
 async function confirmDanger(opts, detail) {

package/dist/output.d.ts

@@ -10,11 +10,18 @@ export type Column = {
     format?: (value: unknown, row: Row) => string;
 };
 /**
- * Epoch milliseconds → ISO 8601, matching the ISO timestamps other tables print.
+ * Timestamp → local ISO-style date and time with the system's UTC offset.
+ *
+ * CLI tables are for people and follow the machine's local timezone. Structured
+ * output remains untouched so scripts continue to receive the server value.
+ */
+export declare function formatLocalDateTime(value: unknown): string;
+/**
+ * Epoch milliseconds → local date and time.
  *
  * Absent values render empty rather than falling through `Number()` coercion:
  * `null` and `""` both become 0 there, which would print a confident-looking
- * `1970-01-01T00:00:00.000Z` for a timestamp the server never sent.
+ * Unix epoch for a timestamp the server never sent.
  */
 export declare function formatEpochMs(value: unknown): string;
 export declare function table(rows: Row[], columns: Column[]): void;

package/dist/output.js

@@ -1,11 +1,34 @@
 import process from "node:process";
 import { extractBillingPayload } from "@neta-art/cohub";
 /**
- * Epoch milliseconds → ISO 8601, matching the ISO timestamps other tables print.
+ * Timestamp → local ISO-style date and time with the system's UTC offset.
+ *
+ * CLI tables are for people and follow the machine's local timezone. Structured
+ * output remains untouched so scripts continue to receive the server value.
+ */
+export function formatLocalDateTime(value) {
+    const date = value instanceof Date
+        ? value
+        : typeof value === "number"
+            ? new Date(value)
+            : typeof value === "string" && value.trim() !== ""
+                ? new Date(value)
+                : null;
+    if (!date || Number.isNaN(date.getTime()))
+        return "";
+    const pad = (part) => String(part).padStart(2, "0");
+    const offsetMinutes = -date.getTimezoneOffset();
+    const offsetSign = offsetMinutes >= 0 ? "+" : "-";
+    const absoluteOffset = Math.abs(offsetMinutes);
+    const offset = `${offsetSign}${pad(Math.floor(absoluteOffset / 60))}:${pad(absoluteOffset % 60)}`;
+    return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}:${pad(date.getSeconds())} ${offset}`;
+}
+/**
+ * Epoch milliseconds → local date and time.
  *
  * Absent values render empty rather than falling through `Number()` coercion:
  * `null` and `""` both become 0 there, which would print a confident-looking
- * `1970-01-01T00:00:00.000Z` for a timestamp the server never sent.
+ * Unix epoch for a timestamp the server never sent.
  */
 export function formatEpochMs(value) {
     const ms = typeof value === "number"
@@ -15,13 +38,14 @@ export function formatEpochMs(value) {
             : Number.NaN;
     if (!Number.isFinite(ms))
         return "";
-    const date = new Date(ms);
-    return Number.isNaN(date.getTime()) ? "" : date.toISOString();
+    return formatLocalDateTime(ms);
 }
 function cellText(column, row) {
     const raw = row[column.key];
     if (column.format)
         return column.format(raw, row);
+    if (/(?:At|Timestamp)$/.test(column.key))
+        return formatLocalDateTime(raw);
     const v = raw ?? "";
     return typeof v === "object" ? JSON.stringify(v) : String(v);
 }

package/dist/runtime/diagnostics.js

@@ -21,6 +21,12 @@ function isRecord(value) {
 function redactUrl(value) {
     try {
         const url = new URL(value);
+        // Redaction must not rewrite the string when there is nothing to hide;
+        // URL.toString() re-encodes (e.g. quotes from wrapped log lines) and
+        // makes healthy URLs look corrupted.
+        const sensitive = [...url.searchParams.keys()].some((key) => SENSITIVE_KEY.test(key));
+        if (!sensitive)
+            return value;
         for (const key of [...url.searchParams.keys()]) {
             if (SENSITIVE_KEY.test(key))
                 url.searchParams.set(key, "[REDACTED]");
@@ -37,7 +43,8 @@ export function redactDiagnosticString(value) {
         : value;
     return shortened
         .replace(/\bBearer\s+[^\s,;]+/gi, "Bearer [REDACTED]")
-        .replace(/\b(rediss?|https?|wss?):\/\/[^\s]+/gi, (url) => redactUrl(url))
+        // Trailing quotes/brackets from wrapped log lines are not part of the URL.
+        .replace(/\b(rediss?|https?|wss?):\/\/[^\s"'<>]+/gi, (url) => redactUrl(url))
         .replace(/\b(authorization|password|secret|token|access[_-]?key|refresh[_-]?token)([\s:=]+)([^\s,;]+)/gi, "$1$2[REDACTED]");
 }
 function redactValue(value, seen = new WeakSet(), depth = 0) {

package/dist/runtime/launch.js

@@ -10,6 +10,7 @@ import { createClient } from "../client.js";
 import { currentIdentityKey, explicitSpace } from "../space.js";
 import { canonicalRuntimeRoot, getRuntimeSpaceBinding, resolveRuntimeSpace } from "./space-binding.js";
 import { requestRuntimeInstance, runtimeInstanceDirectory } from "./instance.js";
+import { ensureNativeSync } from "./native-attach.js";
 import { createDiagnosticConsole, printRuntimeSummary, runtimeWebUrl } from "./presentation.js";
 import { runRuntime } from "./supervisor.js";
 export const resolveLocalSpaceName = (root, name) => name?.trim() || basename(root) || "local-space";
@@ -90,6 +91,9 @@ export async function runtimeUp(program, dir, options) {
             if (existing.root !== root || options.harness.length && [...existing.harnesses].sort().join() !== [...harnesses].sort().join() || options.pi || options.codex) {
                 throw new Error("Runtime is running with a different configuration. Use down first");
             }
+            // `up` is the single idempotent entry: a reused instance adopts its running
+            // Harnesses (unless explicitly overridden) and completes native sync setup.
+            await ensureNativeSync({ root, spaceId: existing.spaceId, identity, harnesses: options.harness.length ? harnesses : parseRuntimeHarnesses(existing.harnesses), yes: options.yes, executables: { pi: options.pi, codex: options.codex } });
             printRuntimeSummary(existing, options.json, true);
             return;
         }
@@ -122,8 +126,8 @@ export async function runtimeUp(program, dir, options) {
             if (!requested && (!binding || createNew))
                 name = (await rl.question(`Space name [${name}]: `)).trim() || name;
             process.stderr.write(`\nDirectory  ${root}\n${requested ? `Space  ${runtimeWebUrl(requested)}\n` : ""}`);
-            const answer = await rl.question("Collaborators can execute as your OS user, beyond this folder. Allow? [y/N] ");
-            if (!/^y(es)?$/i.test(answer.trim()))
+            const answer = await rl.question("Collaborators can execute as your OS user, beyond this folder. Allow? [Y/n] ");
+            if (/^n(o)?$/i.test(answer.trim()))
                 return;
         }
         finally {
@@ -148,6 +152,8 @@ export async function runtimeUp(program, dir, options) {
                 throw new Error("Space does not have a local Runtime");
         },
     });
+    // Consent (or --yes) precedes any user-level integration install; failure never blocks startup.
+    await ensureNativeSync({ root, spaceId, identity, harnesses, yes: options.yes, executables: { pi: options.pi, codex: options.codex } });
     const config = { spaceId, root, identity, harnesses, capabilities, executables: { pi: options.pi, codex: options.codex }, background: Boolean(options.detach), verbose: options.verbose };
     const existing = await requestRuntimeInstance(runtimeInstanceDirectory(identity, spaceId));
     if (existing) {

package/dist/runtime/native-attach.d.ts

@@ -0,0 +1,28 @@
+import { type NativeSyncConfig } from "./native-sync.js";
+type Harness = "pi" | "codex";
+export type NativeSyncReport = {
+    enabled: boolean;
+    harnesses: Harness[];
+    note?: string;
+};
+/** Already enabled for this exact directory and every requested Harness: installation is idempotent. */
+export declare function nativeSyncSatisfied(config: NativeSyncConfig | null, input: {
+    spaceId: string;
+    root: string;
+    harnesses: Harness[];
+}): boolean;
+/** One explicit consent prompt, defaulting to yes; native history may contain secrets. */
+export declare function askNativeSyncConsent(harnesses: Harness[], ask?: (question: string) => Promise<string>): Promise<boolean>;
+/** Enable native sync after consent; capability or write failures warn and never block the Runtime. */
+export declare function ensureNativeSync(input: {
+    root: string;
+    spaceId: string;
+    identity: string;
+    harnesses: Harness[];
+    yes?: boolean;
+    executables?: {
+        pi?: string;
+        codex?: string;
+    };
+}, log?: (line: string) => void): Promise<NativeSyncReport>;
+export {};