airgate 0.1.0 → 0.1.3

package/dist/airgate.mjs

@@ -229,7 +229,76 @@ function spaceName(taken = [], random = Math.random) {
     if (!used.has(name)) return name;
   }
   const base = `${pick(FIRST, random)}-${pick(SECOND, random)}`;
-  for (let n = 2; ; n++) if (!used.has(`${base}-${n}`)) return `${base}-${n}`;
+  for (let n2 = 2; ; n2++) if (!used.has(`${base}-${n2}`)) return `${base}-${n2}`;
+}
+
+// ../sandbox/src/dotenv.ts
+var SECRET_NAME_RE = /^[A-Z_][A-Z0-9_]{0,63}$/;
+function reservedSecretName(name) {
+  return name.startsWith("AIRGATE_") || name.startsWith("LD_") || name.startsWith("DYLD_") || ["PATH", "HOME", "USER", "SHELL", "PWD", "BASH_ENV", "ENV", "PROMPT_COMMAND", "IFS", "TERM", "TMUX"].includes(name);
+}
+function suggestSecretName(raw) {
+  const s2 = raw.trim().toUpperCase().replace(/[^A-Z0-9_]/g, "_").replace(/^([0-9])/, "_$1").slice(0, 64);
+  return SECRET_NAME_RE.test(s2) && !reservedSecretName(s2) ? s2 : null;
+}
+var unescapeDouble = (s2) => s2.replace(/\\([nrt"\\$])/g, (_m, c) => ({ n: "\n", r: "\r", t: "	" })[c] ?? c);
+function parseDotenv(input) {
+  const lines = input.replace(/^\uFEFF/, "").replace(/\r\n?/g, "\n").split("\n");
+  const entries = [];
+  const unparsed = [];
+  for (let i = 0; i < lines.length; i++) {
+    const lineNo = i + 1;
+    const line2 = lines[i].trim();
+    if (!line2 || line2.startsWith("#")) continue;
+    const m = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_.-]*)\s*=\s*(.*)$/.exec(line2);
+    if (!m) {
+      unparsed.push(lineNo);
+      continue;
+    }
+    const key = m[1];
+    let rest = m[2];
+    let value;
+    const q = rest[0];
+    if (q === '"' || q === "'" || q === "`") {
+      let body = rest.slice(1);
+      let close = findClose(body, q);
+      while (close < 0 && i + 1 < lines.length) {
+        i++;
+        body += "\n" + lines[i];
+        close = findClose(body, q);
+      }
+      const raw = close < 0 ? body : body.slice(0, close);
+      value = q === '"' ? unescapeDouble(raw) : raw;
+    } else {
+      value = rest.replace(/\s+#.*$/, "").trim();
+    }
+    let name = key;
+    let note;
+    if (!SECRET_NAME_RE.test(key)) {
+      name = suggestSecretName(key);
+      note = name ? `saved as ${name}` : "not a usable name";
+    } else if (reservedSecretName(key)) {
+      name = null;
+      note = "reserved (the pod sets it)";
+    }
+    entries.push({ key, name, value, line: lineNo, ...note ? { note } : {} });
+  }
+  const values = {};
+  for (const e of entries) if (e.name) values[e.name] = e.value;
+  return { entries, values, unparsed };
+}
+function findClose(s2, q) {
+  for (let i = 0; i < s2.length; i++) {
+    if (q === '"' && s2[i] === "\\") {
+      i++;
+      continue;
+    }
+    if (s2[i] === q) return i;
+  }
+  return -1;
+}
+function dotenvExample(names) {
+  return names.map((n2) => `${n2}=`).join("\n") + (names.length ? "\n" : "");
 }
 
 // src/api.ts
@@ -356,8 +425,8 @@ var Api = class {
   pod(id) {
     return this.request("GET", `/v1/pods/${enc(id)}`).then((r) => r.pod);
   }
-  launch(spec, returnUrl) {
-    return this.request("POST", "/v1/pods", { body: { spec, returnUrl } }).then((r) => r.pod);
+  launch(spec, returnUrl, secrets2) {
+    return this.request("POST", "/v1/pods", { body: { spec, returnUrl, ...secrets2 && Object.keys(secrets2).length ? { secrets: secrets2 } : {} } }).then((r) => r.pod);
   }
   stop(id) {
     return this.request("POST", `/v1/pods/${enc(id)}/stop`, { body: {} }).then((r) => r.pod);
@@ -436,18 +505,48 @@ var Api = class {
   githubConnect(returnUrl) {
     return this.request("POST", "/v1/github/connect", { body: { returnUrl } });
   }
+  inspectRepo(repo) {
+    return this.request("GET", `/v1/github/inspect?repo=${encodeURIComponent(repo)}`);
+  }
   githubRepos(fresh = false) {
     return this.request("GET", `/v1/github/repos${fresh ? "?fresh=1" : ""}`).then((r) => r.repos);
   }
   githubDisconnect(id) {
     return this.request("DELETE", `/v1/github/installations/${id}`);
   }
+  /* model sign-ins: connected to airgate (opt-in), and whether a laptop relay is connected */
+  modelsAuth() {
+    return this.request("GET", "/v1/models/auth");
+  }
+  connectModel(vendor, value) {
+    return this.request("PUT", `/v1/models/auth/${enc(vendor)}`, { body: { value } });
+  }
+  disconnectModel(vendor) {
+    return this.request("DELETE", `/v1/models/auth/${enc(vendor)}`);
+  }
+  relayUrl() {
+    const q = new URLSearchParams({ token: this.tokenForUrl(), client: this.client });
+    return `${this.gateway.replace(/^http/, "ws")}/v1/relay?${q}`;
+  }
   secrets() {
     return this.request("GET", "/v1/secrets");
   }
   setSecret(name, value, podId) {
     return this.request("PUT", `/v1/secrets/${enc(name)}`, { body: { value, ...podId ? { podId } : {} } });
   }
+  previews(id) {
+    return this.request("GET", `/v1/pods/${enc(id)}/previews`);
+  }
+  ensurePreview(id, body) {
+    return this.request("POST", `/v1/pods/${enc(id)}/previews`, { body }).then((r) => r.preview);
+  }
+  openPreview(slug, path = "/") {
+    return this.request("POST", `/v1/previews/${enc(slug)}/open`, { body: { path } }).then((r) => r.url);
+  }
+  /** many at once (a .env file), saved together or not at all */
+  setSecrets(values, podId) {
+    return this.request("PUT", "/v1/secrets", { body: { values, ...podId ? { podId } : {} } });
+  }
   deleteSecret(name, podId) {
     return this.request("DELETE", `/v1/secrets/${enc(name)}${podId ? `?podId=${enc(podId)}` : ""}`);
   }
@@ -1015,10 +1114,10 @@ function drawable(text2, font = "block") {
   return [...String(text2)].filter((ch) => [...f.cased ? ch : ch.toUpperCase()].some((c) => Object.hasOwn(f.glyphs, c))).join("");
 }
 var shapes = (text2, f) => [...String(text2)].flatMap((ch) => [...f.cased ? ch : ch.toUpperCase()]).map((c) => Object.hasOwn(f.glyphs, c) ? f.glyphs[c] : void 0).filter((g) => Boolean(g)).map((g) => g.split("|"));
-function fade(stops, n) {
+function fade(stops, n2) {
   const rgb2 = stops.map((s2) => [1, 3, 5].map((i) => parseInt(s2.slice(i, i + 2), 16)));
-  return Array.from({ length: n }, (_, i) => {
-    const k = n > 1 ? i / (n - 1) * (rgb2.length - 1) : 0;
+  return Array.from({ length: n2 }, (_, i) => {
+    const k = n2 > 1 ? i / (n2 - 1) * (rgb2.length - 1) : 0;
     const a = Math.min(rgb2.length - 2, Math.floor(k)), f = k - a;
     const c = rgb2.length === 1 ? rgb2[0] : rgb2[a].map((v, j) => Math.round(v + (rgb2[a + 1][j] - v) * f));
     return `#${c.map((v) => v.toString(16).padStart(2, "0")).join("")}`;
@@ -1446,14 +1545,14 @@ function merge(parts, extra = [], plain = false) {
     };
     const idx = lists.map((p) => (p ?? []).map(add));
     const inked = lists.some((p) => !p) ? { light: add(INK2.light), dark: add(INK2.dark) } : null;
-    const n = all.length;
+    const n2 = all.length;
     const values = all.map(rgb);
     const into = all.map((_, i) => i);
-    const alive = new Uint8Array(n).fill(1);
-    const near = new Int32Array(n), gap = new Float64Array(n);
+    const alive = new Uint8Array(n2).fill(1);
+    const near = new Int32Array(n2), gap = new Float64Array(n2);
     const look = (i) => {
       let best = Infinity, at4 = -1;
-      for (let j = 0; j < n; j++)
+      for (let j = 0; j < n2; j++)
         if (j !== i && alive[j]) {
           const d = apart(values[i], values[j]);
           if (d < best)
@@ -1462,19 +1561,19 @@ function merge(parts, extra = [], plain = false) {
       near[i] = at4;
       gap[i] = best;
     };
-    for (let i = 0; i < n; i++)
+    for (let i = 0; i < n2; i++)
       look(i);
-    for (let left = n; left > 64; left--) {
+    for (let left = n2; left > 64; left--) {
       let a = -1;
-      for (let i = 0; i < n; i++)
+      for (let i = 0; i < n2; i++)
         if (alive[i] && (a < 0 || gap[i] < gap[a]))
           a = i;
       const keep = Math.min(a, near[a]), drop = Math.max(a, near[a]);
       alive[drop] = 0;
-      for (let i = 0; i < n; i++)
+      for (let i = 0; i < n2; i++)
         if (into[i] === drop)
           into[i] = keep;
-      for (let i = 0; i < n; i++)
+      for (let i = 0; i < n2; i++)
         if (alive[i] && near[i] === drop)
           look(i);
     }
@@ -1679,8 +1778,8 @@ function knockout(s2, g, x, y, h, mask2) {
     }
 }
 var at = (v, t) => {
-  const n = typeof v === "function" ? v(t) : v;
-  return finite(n) ? Math.floor(n) : 0;
+  const n2 = typeof v === "function" ? v(t) : v;
+  return finite(n2) ? Math.floor(n2) : 0;
 };
 var around = (p, size2, room) => {
   const span = room + size2;
@@ -1870,19 +1969,19 @@ function crop(src, region) {
     fail2(`crop's region, ${cols} by ${rows2} at ${x}, ${y}, misses ${p.meta.name}, which is ${p.cols} by ${p.rows}`);
   return reshape("crop", p, x1 - x0, y1 - y0, (g, s2) => s2.paste(g, -x0, -y0));
 }
-function pad(src, n) {
+function pad(src, n2) {
   const p = prepare("pad", src);
   let sides;
-  if (typeof n === "number")
-    sides = Array(4).fill(whole2(n, "pad", 0, 0));
-  else if (Array.isArray(n) && n.length === 2) {
-    const [r, c] = [whole2(n[0], "pad's rows", 0, 0), whole2(n[1], "pad's columns", 0, 0)];
+  if (typeof n2 === "number")
+    sides = Array(4).fill(whole2(n2, "pad", 0, 0));
+  else if (Array.isArray(n2) && n2.length === 2) {
+    const [r, c] = [whole2(n2[0], "pad's rows", 0, 0), whole2(n2[1], "pad's columns", 0, 0)];
     sides = [r, c, r, c];
-  } else if (n !== null && typeof n === "object" && !Array.isArray(n)) {
-    const o = n;
+  } else if (n2 !== null && typeof n2 === "object" && !Array.isArray(n2)) {
+    const o = n2;
     sides = ["top", "right", "bottom", "left"].map((k) => whole2(o[k], `pad's ${k}`, 0, 0));
   } else
-    return fail2(`pad takes a number, [rows, columns] or { top, right, bottom, left }, not ${shown(n)}`);
+    return fail2(`pad takes a number, [rows, columns] or { top, right, bottom, left }, not ${shown(n2)}`);
   const [top, right, bottom, left] = sides;
   return reshape("pad", p, p.cols + left + right, p.rows + top + bottom, (g, s2) => s2.paste(g, left, top));
 }
@@ -2069,7 +2168,7 @@ function optionsOf2(o, fx, keys) {
       fail2(`${fx}() has no option ${JSON.stringify(k)}${RENAMED[`${fx}.${k}`] ? "" : suggest(k, known)}: ${RENAMED[`${fx}.${k}`] ?? `it takes ${or2(known)}`}`);
   return o;
 }
-var mod = (a, n) => (a % n + n) % n;
+var mod = (a, n2) => (a % n2 + n2) % n2;
 var gcd2 = (a, b2) => b2 ? gcd2(b2, a % b2) : a;
 function lcm(a, b2) {
   const x = Math.round(a * 100), y = Math.round(b2 * 100);
@@ -2079,14 +2178,14 @@ function lcm(a, b2) {
   return k * y <= 6e3 ? +(k * b2).toFixed(6) : void 0;
 }
 function quiet(t, busy, span) {
-  const n = 480;
+  const n2 = 480;
   let from = -1;
-  for (let k = 0; k <= n; k++) {
-    const u = t + span * k / n;
+  for (let k = 0; k <= n2; k++) {
+    const u = t + span * k / n2;
     if (from < 0 && !busy(u))
       from = u;
     else if (from >= 0 && busy(u))
-      return +((from + u) / 2 - span / n / 2).toFixed(3);
+      return +((from + u) / 2 - span / n2 / 2).toFixed(3);
   }
   return from < 0 ? t : +((from + t + span) / 2).toFixed(3);
 }
@@ -2152,7 +2251,7 @@ function mainInk(p, at3, options, map) {
   const most = (paper) => {
     const { text: text2, color } = snapshot(p, at3, { paper, options });
     const count = /* @__PURE__ */ new Map();
-    let best = 0, n = 0;
+    let best = 0, n2 = 0;
     for (let k = 0, i = 0; k < text2.length; k++) {
       const c = text2.charCodeAt(k);
       if (c === 10)
@@ -2160,8 +2259,8 @@ function mainInk(p, at3, options, map) {
       if (c !== 32 && color && i < color.length) {
         const v = (count.get(color[i]) ?? 0) + 1;
         count.set(color[i], v);
-        if (v > n)
-          n = v, best = color[i];
+        if (v > n2)
+          n2 = v, best = color[i];
       }
       i++;
     }
@@ -2380,14 +2479,14 @@ function typeIn(src, options) {
       what: "typed in",
       setup: () => (t, s2, g) => {
         const local = cycle2 ? mod(t, cycle2) : t;
-        const n = Math.floor((local - start) * speed2 + 1e-6);
+        const n2 = Math.floor((local - start) * speed2 + 1e-6);
         const all = g.chars.length;
         let shown2 = 0, next = -1, last = -1;
         for (let k = 0; k < all; k++) {
           const i = seq ? seq[k] : k;
           if (g.chars[i] === EMPTY)
             continue;
-          if (shown2 >= n) {
+          if (shown2 >= n2) {
             next = i;
             break;
           }
@@ -2432,13 +2531,13 @@ function dissolve(src, options) {
   const edge = o.edge === "" ? "" : chars2(o.edge, "dissolve.edge", ".:", 1);
   const seed = num(o.seed, "dissolve.seed", 1, "whole");
   return build2("dissolve", src, o, ({ meta: m }) => {
-    const n = m.cols * m.rows, aspect = m.cell ?? 2;
-    const v = new Float64Array(n);
+    const n2 = m.cols * m.rows, aspect = m.cell ?? 2;
+    const v = new Float64Array(n2);
     for (let y = 0, i = 0; y < m.rows; y++)
       for (let x = 0; x < m.cols; x++, i++)
         v[i] = 0.8 * valueNoise(x * scale2, y * scale2 * aspect, seed) + 0.2 * hash(x, y, seed, 3);
-    const at3 = new Float32Array(n);
-    Int32Array.from({ length: n }, (_, i) => i).sort((a, b2) => v[a] - v[b2]).forEach((i, rank) => at3[i] = (rank + 0.5) / n);
+    const at3 = new Float32Array(n2);
+    Int32Array.from({ length: n2 }, (_, i) => i).sort((a, b2) => v[a] - v[b2]).forEach((i, rank) => at3[i] = (rank + 0.5) / n2);
     const band = edge ? 0.12 : 0;
     const codes = [...edge].map((c) => c.charCodeAt(0)), blocks = auto ? [9617, 9618] : codes;
     return {
@@ -2451,7 +2550,7 @@ function dissolve(src, options) {
         if (k >= 1)
           return copy(s2, g);
         const front = k * (1 + band);
-        for (let i = 0; i < n; i++) {
+        for (let i = 0; i < n2; i++) {
           const ch = g.chars[i];
           if (ch === EMPTY)
             continue;
@@ -2625,7 +2724,7 @@ function wave(src, options) {
       const lines = rows2 ? h : w;
       for (let k = 0; k < lines; k++) {
         const off = room + Math.round(amplitude * Math.sin(TAU * (k / wavelength - t / period2)));
-        for (let j = 0, n = rows2 ? w : h; j < n; j++) {
+        for (let j = 0, n2 = rows2 ? w : h; j < n2; j++) {
           const i = rows2 ? k * w + j : j * w + k;
           if (g.chars[i] === EMPTY)
             continue;
@@ -2637,8 +2736,8 @@ function wave(src, options) {
 }
 function hsl(h, s2, l) {
   const a = s2 * Math.min(l, 1 - l);
-  const f = (n) => {
-    const k = (n + h / 30) % 12;
+  const f = (n2) => {
+    const k = (n2 + h / 30) % 12;
     return Math.round(255 * (l - a * Math.max(-1, Math.min(k - 3, 9 - k, 1))));
   };
   return "#" + [f(0), f(8), f(4)].map((v) => v.toString(16).padStart(2, "0")).join("");
@@ -2647,7 +2746,7 @@ var hues = {
   light: Array.from({ length: 12 }, (_, i) => hsl(i * 30, 0.8, 0.4)),
   dark: Array.from({ length: 12 }, (_, i) => hsl(i * 30, 0.9, 0.66))
 };
-var cycle = (stops, n) => stops.length === 1 ? Array(n).fill(stops[0]) : gradient([...stops, stops[0]], n + 1).slice(0, n);
+var cycle = (stops, n2) => stops.length === 1 ? Array(n2).fill(stops[0]) : gradient([...stops, stops[0]], n2 + 1).slice(0, n2);
 function rainbowOf(fx, src, options, cyclesBy) {
   const o = optionsOf2(options, fx, ["colors", "steps", "period", "cycles", "direction"]);
   const steps = num(o.steps, `${fx}.steps`, 12, "steps");
@@ -2919,14 +3018,14 @@ var mix = (a, b2, k) => {
   const x = rgb(a), y = rgb(b2);
   return hex(x.map((v, i) => lerp(v, y[i], clamp(k))));
 };
-function gradient(stops, n) {
+function gradient(stops, n2) {
   if (!Array.isArray(stops) || !stops.length)
     fail2("a gradient takes one or more colours as #rrggbb");
-  if (!Number.isInteger(n) || n < 1)
-    fail2(`a gradient takes a whole number of colours of 1 or more, not ${String(n)}`);
+  if (!Number.isInteger(n2) || n2 < 1)
+    fail2(`a gradient takes a whole number of colours of 1 or more, not ${String(n2)}`);
   const c = stops.map(rgb);
-  return Array.from({ length: n }, (_, i) => {
-    const k = n > 1 ? i / (n - 1) * (c.length - 1) : 0;
+  return Array.from({ length: n2 }, (_, i) => {
+    const k = n2 > 1 ? i / (n2 - 1) * (c.length - 1) : 0;
     const a = Math.min(c.length - 2, Math.floor(k));
     return c.length === 1 ? hex(c[0]) : hex(c[a].map((v, j) => lerp(v, c[a + 1][j], k - a)));
   });
@@ -3162,7 +3261,7 @@ function colorOf(v, what = "color") {
 function didYouMean(word) {
   const all = [.../* @__PURE__ */ new Set([...Object.keys(schemes), ...Object.keys(materialColors)])];
   const near = nearWords(word, all);
-  return near.length ? `did you mean ${near.map((n) => JSON.stringify(n)).join(" or ")}?` : `a colour of your own is #rrggbb, and the names are ${and2(all)}`;
+  return near.length ? `did you mean ${near.map((n2) => JSON.stringify(n2)).join(" or ")}?` : `a colour of your own is #rrggbb, and the names are ${and2(all)}`;
 }
 function lettersApart(a, b2) {
   const d = Array.from({ length: b2.length + 1 }, (_, j) => j);
@@ -3230,14 +3329,14 @@ var SYNONYMS = {
 function nearWords(word, words2) {
   const w = word.toLowerCase().slice(0, 40);
   const same = (SYNONYMS[w] ?? []).filter((s2) => words2.includes(s2) && s2 !== word);
-  const close = words2.filter((n) => !same.includes(n) && lettersApart(w, n.toLowerCase()) <= (w.length <= 4 ? 1 : 2));
+  const close = words2.filter((n2) => !same.includes(n2) && lettersApart(w, n2.toLowerCase()) <= (w.length <= 4 ? 1 : 2));
   return [...same, ...close].slice(0, 3);
 }
 function suggest(word, words2) {
   if (typeof word !== "string")
     return "";
   const near = nearWords(word, words2);
-  return near.length ? ` (did you mean ${near.map((n) => JSON.stringify(n)).join(" or ")}?)` : "";
+  return near.length ? ` (did you mean ${near.map((n2) => JSON.stringify(n2)).join(" or ")}?)` : "";
 }
 function mergePalettes(parts) {
   const palette = [];
@@ -3426,8 +3525,8 @@ var Surface = class _Surface {
     const color = env.color;
     if (color && this.palette) {
       const ink = this.palette.ink(this.paper);
-      const n = Math.min(color.length, chars3.length);
-      for (let i = 0; i < n; i++)
+      const n2 = Math.min(color.length, chars3.length);
+      for (let i = 0; i < n2; i++)
         color[i] = colors[i] === NONE ? ink : colors[i];
     }
     const line2 = this.#line;
@@ -3515,8 +3614,8 @@ var Chainable = class {
   freeze(at3) {
     return freeze(this, at3);
   }
-  pad(n) {
-    return pad(this, n);
+  pad(n2) {
+    return pad(this, n2);
   }
   border(o) {
     return border(this, o);
@@ -3631,11 +3730,11 @@ function asPiece(src, name = "text") {
     const meta3 = checkMeta({ name, category: "type", note: name, cols: grid2.cols, rows: grid2.rows, fps: 0, ...palette ? { palette: palette.colors } : {} });
     const other = grid2.clone();
     if (palette?.themed) {
-      const n = palette.size;
+      const n2 = palette.size;
       for (let i = 0; i < other.colors.length; i++) {
         const c = other.colors[i];
         if (c !== NONE)
-          other.colors[i] = grid2.paper ? c < n ? c + n : c : c >= n ? c - n : c;
+          other.colors[i] = grid2.paper ? c < n2 ? c + n2 : c : c >= n2 ? c - n2 : c;
       }
     }
     other.paper = !grid2.paper;
@@ -3651,7 +3750,7 @@ function asPiece(src, name = "text") {
         lines.shift();
       while (lines.length > 1 && !lines[lines.length - 1].trim())
         lines.pop();
-      const indent = lines.reduce((n, l) => l.trim() ? Math.min(n, l.length - l.trimStart().length) : n, Infinity);
+      const indent = lines.reduce((n2, l) => l.trim() ? Math.min(n2, l.length - l.trimStart().length) : n2, Infinity);
       if (Number.isFinite(indent))
         lines = lines.map((l) => l.slice(indent));
     }
@@ -3695,9 +3794,9 @@ function snapshot(src, t = 0, { paper = false, mono = false, options = {} } = {}
 // ../../node_modules/ascii.rest/dist/kit/math.js
 var said = (v) => typeof v === "string" ? JSON.stringify(v) : Array.isArray(v) ? `[${v.map(said).join(", ")}]` : String(v);
 var finite2 = (v) => typeof v === "number" && Number.isFinite(v);
-function mod2(a, n) {
-  const r = a % n;
-  return r < 0 ? r + n < n ? r + n : 0 : r + 0;
+function mod2(a, n2) {
+  const r = a % n2;
+  return r < 0 ? r + n2 < n2 ? r + n2 : 0 : r + 0;
 }
 var tables = [];
 function table(seed) {
@@ -3862,7 +3961,7 @@ var H3 = 1 / 6;
 var F4 = (Math.sqrt(5) - 1) / 4;
 var H4 = (5 - Math.sqrt(5)) / 20;
 var S4 = 27;
-var unit = (n) => n <= -1 ? 0 : n >= 1 ? 1 : 0.5 + 0.5 * n;
+var unit = (n2) => n2 <= -1 ? 0 : n2 >= 1 ? 1 : 0.5 + 0.5 * n2;
 var dot4 = (g, a, b2, c, d) => G4[g] * a + G4[g + 1] * b2 + G4[g + 2] * c + G4[g + 3] * d;
 function simplex4(x, y, z, w, seed) {
   const { perm } = table(seed);
@@ -3905,26 +4004,26 @@ function simplex4(x, y, z, w, seed) {
   const x3 = x0 - i3 + 3 * H4, y3 = y0 - j3 + 3 * H4, z3 = z0 - l3 + 3 * H4, w3 = w0 - m3 + 3 * H4;
   const x4 = x0 - 1 + 4 * H4, y4 = y0 - 1 + 4 * H4, z4 = z0 - 1 + 4 * H4, w4 = w0 - 1 + 4 * H4;
   const ii = i & 255, jj = j & 255, ll = l & 255, mm = m & 255;
-  let n = 0, k;
+  let n2 = 0, k;
   if ((k = 0.6 - x0 * x0 - y0 * y0 - z0 * z0 - w0 * w0) > 0)
-    k *= k, n += k * k * dot4((perm[ii + perm[jj + perm[ll + perm[mm]]]] & 31) * 4, x0, y0, z0, w0);
+    k *= k, n2 += k * k * dot4((perm[ii + perm[jj + perm[ll + perm[mm]]]] & 31) * 4, x0, y0, z0, w0);
   if ((k = 0.6 - x1 * x1 - y1 * y1 - z1 * z1 - w1 * w1) > 0)
-    k *= k, n += k * k * dot4((perm[ii + i1 + perm[jj + j1 + perm[ll + l1 + perm[mm + m1]]]] & 31) * 4, x1, y1, z1, w1);
+    k *= k, n2 += k * k * dot4((perm[ii + i1 + perm[jj + j1 + perm[ll + l1 + perm[mm + m1]]]] & 31) * 4, x1, y1, z1, w1);
   if ((k = 0.6 - x2 * x2 - y2 * y2 - z2 * z2 - w2 * w2) > 0)
-    k *= k, n += k * k * dot4((perm[ii + i2 + perm[jj + j2 + perm[ll + l2 + perm[mm + m2]]]] & 31) * 4, x2, y2, z2, w2);
+    k *= k, n2 += k * k * dot4((perm[ii + i2 + perm[jj + j2 + perm[ll + l2 + perm[mm + m2]]]] & 31) * 4, x2, y2, z2, w2);
   if ((k = 0.6 - x3 * x3 - y3 * y3 - z3 * z3 - w3 * w3) > 0)
-    k *= k, n += k * k * dot4((perm[ii + i3 + perm[jj + j3 + perm[ll + l3 + perm[mm + m3]]]] & 31) * 4, x3, y3, z3, w3);
+    k *= k, n2 += k * k * dot4((perm[ii + i3 + perm[jj + j3 + perm[ll + l3 + perm[mm + m3]]]] & 31) * 4, x3, y3, z3, w3);
   if ((k = 0.6 - x4 * x4 - y4 * y4 - z4 * z4 - w4 * w4) > 0)
-    k *= k, n += k * k * dot4((perm[ii + 1 + perm[jj + 1 + perm[ll + 1 + perm[mm + 1]]]] & 31) * 4, x4, y4, z4, w4);
-  return S4 * n;
+    k *= k, n2 += k * k * dot4((perm[ii + 1 + perm[jj + 1 + perm[ll + 1 + perm[mm + 1]]]] & 31) * 4, x4, y4, z4, w4);
+  return S4 * n2;
 }
 var OFF = Array.from({ length: 16 }, (_, i) => [i * 0.6180339887 % 1 * 97.3, i * 0.7548776662 % 1 * 89.1]);
 var octN = 4;
 var octLac = 2;
 var octGain = 0.5;
 var octSeed = 0;
-function octaves(o, n = 4) {
-  octN = o?.octaves ?? n;
+function octaves(o, n2 = 4) {
+  octN = o?.octaves ?? n2;
   octLac = o?.lacunarity ?? 2;
   octGain = o?.gain ?? 0.5;
   octSeed = o?.seed ?? 0;
@@ -3939,8 +4038,8 @@ function octaves(o, n = 4) {
 }
 var SPREAD = 1.45;
 var WIDEN4 = 1.35;
-var crest = (n) => {
-  const r = 1 - (n < 0 ? -n : n);
+var crest = (n2) => {
+  const r = 1 - (n2 < 0 ? -n2 : n2);
   return r < 0 ? 0 : r * r;
 };
 var weigh = (r) => r > 0.5 ? 1 : 2 * r;
@@ -3955,10 +4054,10 @@ function loopNoise(x, y, t, period2, o) {
   const z = radius * Math.cos(a), w = radius * Math.sin(a);
   let sum = 0, amp = 1, norm = 0, f = 1, weight = 1;
   for (let i = 0; i < octN; i++) {
-    let n = simplex4(x * f + OFF[i][0], y * f + OFF[i][1], z * f, w * f, octSeed) * WIDEN4;
+    let n2 = simplex4(x * f + OFF[i][0], y * f + OFF[i][1], z * f, w * f, octSeed) * WIDEN4;
     if (ridge)
-      n = crest(n) * weight, weight = weigh(n);
-    sum += amp * n;
+      n2 = crest(n2) * weight, weight = weigh(n2);
+    sum += amp * n2;
     norm += amp;
     amp *= octGain;
     f *= octLac;
@@ -3971,14 +4070,14 @@ var B3 = B1 + 1;
 var E4 = TAU / 3;
 var E5 = TAU / 4.5;
 var bounce = (k) => {
-  const n = 7.5625, d = 2.75;
+  const n2 = 7.5625, d = 2.75;
   if (k < 1 / d)
-    return n * k * k;
+    return n2 * k * k;
   if (k < 2 / d)
-    return n * (k -= 1.5 / d) * k + 0.75;
+    return n2 * (k -= 1.5 / d) * k + 0.75;
   if (k < 2.5 / d)
-    return n * (k -= 2.25 / d) * k + 0.9375;
-  return n * (k -= 2.625 / d) * k + 0.984375;
+    return n2 * (k -= 2.25 / d) * k + 0.9375;
+  return n2 * (k -= 2.625 / d) * k + 0.984375;
 };
 var curves = {
   linear: (k) => k,
@@ -4149,7 +4248,7 @@ function brush(ch, what) {
     fail2(`${what} takes one character, or "" to clear, not ${show3(ch)}`);
   return code(ch);
 }
-var finite3 = (...v) => v.every((n) => typeof n === "number" && Number.isFinite(n));
+var finite3 = (...v) => v.every((n2) => typeof n2 === "number" && Number.isFinite(n2));
 function show3(v, depth = 0) {
   if (typeof v === "string")
     return JSON.stringify(v.length > 40 ? v.slice(0, 40) + "\u2026" : v);
@@ -4159,7 +4258,7 @@ function show3(v, depth = 0) {
     return String(v);
   if (depth > 1)
     return Array.isArray(v) ? "[...]" : "{...}";
-  const more = (n) => n > 6 ? ", ..." : "";
+  const more = (n2) => n2 > 6 ? ", ..." : "";
   if (Array.isArray(v))
     return `[${Array.from(v.slice(0, 6), (x) => show3(x, depth + 1)).join(", ")}${more(v.length)}]`;
   const entries = Object.entries(v);
@@ -4219,12 +4318,12 @@ function trace(x0, y0, x1, y1, w, h) {
   const dx = Math.abs(x1 - x0), dy = -Math.abs(y1 - y0), sx = x0 < x1 ? 1 : -1, sy = y0 < y1 ? 1 : -1;
   if (XS.length < dx - dy + 1)
     XS = new Int32Array(dx - dy + 1), YS = new Int32Array(dx - dy + 1);
-  let err = dx + dy, n = 0;
+  let err = dx + dy, n2 = 0;
   for (; ; ) {
-    XS[n] = x0;
-    YS[n++] = y0;
+    XS[n2] = x0;
+    YS[n2++] = y0;
     if (x0 === x1 && y0 === y1)
-      return n;
+      return n2;
     const e2 = 2 * err;
     if (e2 >= dy)
       err += dy, x0 += sx;
@@ -4261,11 +4360,11 @@ function glyph(a, round, weight) {
     return ROUND.get(a);
   let c = GLYPH.get(a);
   if (c === void 0) {
-    let n = 0;
+    let n2 = 0;
     for (let k = 0; k < 8; k += 2)
       if (a >> k & 3)
-        n |= weight << k;
-    c = GLYPH.get(n);
+        n2 |= weight << k;
+    c = GLYPH.get(n2);
   }
   return c ?? DOT;
 }
@@ -4283,14 +4382,14 @@ function linked(s2, j, b2, ascii) {
     const nx = x + (k === AR ? 1 : k === AL ? -1 : 0), ny = y + (k === AD ? 1 : k === AU ? -1 : 0);
     if (nx < 0 || ny < 0 || nx >= s2.cols || ny >= s2.rows)
       continue;
-    const n = s2.chars[ny * s2.cols + nx], nb = ascii ? asciiArms(n) : ARMS.get(n);
+    const n2 = s2.chars[ny * s2.cols + nx], nb = ascii ? asciiArms(n2) : ARMS.get(n2);
     if (nb !== void 0 && nb >> (k ^ 4) & 3)
       m |= b2 & 3 << k;
   }
   return m;
 }
-function place3(s2, j, c, k, join5, a = ARMS.get(c), ascii = false, round = false) {
-  if (join5 && a !== void 0) {
+function place3(s2, j, c, k, join7, a = ARMS.get(c), ascii = false, round = false) {
+  if (join7 && a !== void 0) {
     const old = s2.chars[j], b2 = ascii ? asciiArms(old) : ARMS.get(old);
     if (b2 !== void 0) {
       const kept = linked(s2, j, b2, ascii);
@@ -4408,8 +4507,8 @@ function write(s2, x, y, str2, o, region) {
   let lines = layout(t, bw, wrap2);
   if (lines.length > bh)
     lines = lines.slice(0, bh);
-  const n = lines.length;
-  const top = valign === "top" ? fy : valign === "middle" ? fy + Math.floor((bh - n) / 2) : fy + bh - n;
+  const n2 = lines.length;
+  const top = valign === "top" ? fy : valign === "middle" ? fy + Math.floor((bh - n2) / 2) : fy + bh - n2;
   const lefts = lines.map((l) => align === "left" ? fx : align === "center" ? fx + Math.floor((bw - l.length) / 2) : fx + bw - l.length);
   return writeLines(s2, lines, lefts, top, k, transparent);
 }
@@ -4422,7 +4521,7 @@ function label(s2, x, y, str2, o) {
   if (!finite3(x, y) || t === "")
     return { x: finite3(x) ? Math.floor(x) : 0, y: finite3(y) ? Math.floor(y) : 0, cols: 0, rows: 0 };
   const lines = t.split("\n");
-  const start = (v, n) => Math.floor(v - n / 2 + 0.5);
+  const start = (v, n2) => Math.floor(v - n2 / 2 + 0.5);
   return writeLines(s2, lines, lines.map((l) => start(x, l.length)), start(y, lines.length), k, transparent);
 }
 function around2(on, cx, cy, r, turn) {
@@ -4456,7 +4555,7 @@ function rect(s2, x, y, w, h, o) {
   if (title)
     for (const ch of title)
       code(ch);
-  const join5 = yes(o?.join, "join", true);
+  const join7 = yes(o?.join, "join", true);
   const k = paint(s2, color), fk = fillColor === void 0 ? k : paint(s2, fillColor);
   if (!finite3(x, y, w, h))
     return { x: 0, y: 0, cols: 0, rows: 0 };
@@ -4479,10 +4578,10 @@ function rect(s2, x, y, w, h, o) {
     const put = (cx, cy, e, reach = 255) => {
       const j = s2.index(cx, cy), a = ascii ? EDGE_ARMS[e] : ARMS.get(ed[e]);
       if (j >= 0)
-        place3(s2, j, ed[e], k, join5, a === void 0 ? a : a & reach, ascii, round);
+        place3(s2, j, ed[e], k, join7, a === void 0 ? a : a & reach, ascii, round);
     };
-    const end = (i, n, first, last) => n < 2 ? 255 : i === 0 ? 3 << first : i === n - 1 ? 3 << last : 255;
-    const from = (o2, lo) => Math.max(lo, -o2), to = (o2, hi, n) => Math.min(hi, n - o2);
+    const end = (i, n2, first, last) => n2 < 2 ? 255 : i === 0 ? 3 << first : i === n2 - 1 ? 3 << last : 255;
+    const from = (o2, lo) => Math.max(lo, -o2), to = (o2, hi, n2) => Math.min(hi, n2 - o2);
     if (h === 1)
       for (let i = from(x, 0); i < to(x, w, s2.cols); i++)
         put(x + i, y, 4, end(i, w, AR, AL));
@@ -4530,11 +4629,11 @@ function ellipseCells(w, h, cx, cy, rx, ry, inside, visit, aspect = 0, from = 0,
   const j0 = Math.max(0, Math.floor(cy - ry) - 1), j1 = Math.min(h - 1, Math.ceil(cy + ry));
   if (i0 > i1 || j0 > j1)
     return;
-  const bw = i1 - i0 + 1, n = bw * (j1 - j0 + 1);
-  if (EDGE.length < n)
-    EDGE = new Uint8Array(n);
+  const bw = i1 - i0 + 1, n2 = bw * (j1 - j0 + 1);
+  if (EDGE.length < n2)
+    EDGE = new Uint8Array(n2);
   const edge = EDGE;
-  edge.fill(0, 0, n);
+  edge.fill(0, 0, n2);
   const mark = (i2, j2, kind) => {
     if (i2 >= i0 && i2 <= i1 && j2 >= j0 && j2 <= j1)
       edge[(j2 - j0) * bw + i2 - i0] |= kind;
@@ -4558,7 +4657,7 @@ function ellipseCells(w, h, cx, cy, rx, ry, inside, visit, aspect = 0, from = 0,
     mark(Math.floor(cx - xo), j2, steep ? 2 : 8);
     mark(Math.ceil(cx + xo) - 1, j2, steep ? 2 : 8);
   }
-  for (let k = 0; k < n; k++)
+  for (let k = 0; k < n2; k++)
     edge[k] = edge[k] & 3 | ((edge[k] & 12) === 12 ? 1 : 0);
   for (let j2 = j0; j2 <= j1; j2++)
     for (let i2 = i0; i2 <= i1; i2++) {
@@ -4615,11 +4714,11 @@ function shape(s2, cx, cy, rx, ry, o, what, from = 0, span = 1) {
   const ch = char === "auto" ? "auto" : brush(char, `${/^[aeiou]/.test(what) ? "an" : "a"} ${what}'s char`);
   const f = fill === void 0 || fill === false ? null : brush(fill, "fill");
   const k = paint(s2, color), fk = fillColor === void 0 ? k : paint(s2, fillColor);
-  const join5 = yes(o?.join, "join", true);
+  const join7 = yes(o?.join, "join", true);
   ellipseCells(s2.cols, s2.rows, cx, cy, rx, ry, f !== null, (x, y, edge, slope) => {
     const j = y * s2.cols + x;
     if (edge)
-      place3(s2, j, ch === "auto" ? slope : ch, k, join5 && ch !== "auto");
+      place3(s2, j, ch === "auto" ? slope : ch, k, join7 && ch !== "auto");
     else
       s2.put(j, f, f === EMPTY ? NONE : fk);
   }, ch === "auto" ? s2.aspect : 0, from, span);
@@ -4700,8 +4799,8 @@ var BrailleCanvas = class {
   }
   line(x0, y0, x1, y1, color) {
     const k = this.#k(color);
-    const n = trace(x0, y0, x1, y1, this.width, this.height);
-    for (let i = 0; i < n; i++)
+    const n2 = trace(x0, y0, x1, y1, this.width, this.height);
+    for (let i = 0; i < n2; i++)
       this.#dot(XS[i], YS[i], k);
   }
   ray(x, y, length, turn, color) {
@@ -4750,12 +4849,12 @@ var BrailleCanvas = class {
     y1 ??= 1;
     if (y0 === y1)
       fail2(`plot's y0 and y1 take two different numbers, the values at the bottom and the top, not ${y0} and ${y1}`);
-    const w = this.width, h = this.height, n = list2 ? list2.length : w;
+    const w = this.width, h = this.height, n2 = list2 ? list2.length : w;
     const top = fill ? new Int32Array(w).fill(h) : null;
     let px = 0, py = NaN;
-    for (let i = 0; i < n; i++) {
+    for (let i = 0; i < n2; i++) {
       const v = list2 ? list2[i] : f(x0 + (x1 - x0) * i / Math.max(1, w - 1));
-      const x = list2 ? n > 1 ? Math.round(i * (w - 1) / (n - 1)) : 0 : i;
+      const x = list2 ? n2 > 1 ? Math.round(i * (w - 1) / (n2 - 1)) : 0 : i;
       const y = typeof v === "number" && Number.isFinite(v) ? Math.round((y1 - v) / (y1 - y0) * (h - 1)) : NaN;
       if (Number.isFinite(y)) {
         const m = Number.isFinite(py) ? trace(px, py, x, y, w, h) : trace(x, y, x, y, w, h);
@@ -4854,7 +4953,7 @@ function tones(accent, more = []) {
 var WIDGET = ["color", ...NAMING];
 var naming2 = (o, name, note) => ({ name: o.name ?? name, note: (o.note ?? note).slice(0, 72) });
 var framing = (p, framed) => framed ? Object.assign(p, { frames: true }) : p;
-function amountOf(what, v, min, max, share) {
+function amountOf(what, v, min, max, share2) {
   if (v === void 0)
     return void 0;
   if (typeof v === "function") {
@@ -4870,10 +4969,10 @@ function amountOf(what, v, min, max, share) {
     return min + +m[1] / 100 * (max - min);
   }
   if (typeof v !== "number" || !Number.isFinite(v) || v < min || v > max) {
-    const hint = share && typeof v === "number" && v > 1 && v <= 100 ? `: did you mean ${+(v / 100).toFixed(4)}, or "${v}%"?` : "";
+    const hint = share2 && typeof v === "number" && v > 1 && v <= 100 ? `: did you mean ${+(v / 100).toFixed(4)}, or "${v}%"?` : "";
     fail2(`${what}'s value takes a number from ${min} to ${max}, a percentage such as "64%", or a function that reads one, not ${show2(v)}${hint}`);
   }
-  if (!share && min === 0 && max === 100 && v > 0 && v < 1)
+  if (!share2 && min === 0 && max === 100 && v > 0 && v < 1)
     fail2(`${what}'s value is a reading from 0 to 100, and ${v} is less than 1: did you mean ${+(v * 100).toFixed(2)}, or "${+(v * 100).toFixed(2)}%"? Give it max: 1 for a reading from 0 to 1`);
   return v;
 }
@@ -4894,24 +4993,24 @@ function progressBar(o) {
   const smooth = ease.inOutSine;
   const loop = loopOf(fill + 1, true);
   const cols = label2.length + width + (percent ? 5 : 0);
-  const share = (v) => (v - min) / (max - min);
+  const share2 = (v) => (v - min) / (max - min);
   const timing = live ? { fps: 4, clock: true } : value === void 0 ? { fps: 24, loop, still: fill } : { fps: 0 };
-  const note = live ? "a progress bar, live" : value === void 0 ? "a progress bar filling" : `a progress bar at ${Math.round(share(value) * 100)}%`;
+  const note = live ? "a progress bar, live" : value === void 0 ? "a progress bar filling" : `a progress bar at ${Math.round(share2(value) * 100)}%`;
   return piece({ ...naming2(p, label2.trim() || "progress", note), category: "ui", cols, rows: 1, ...timing, palette: tones(themed2("progressBar's color", p.color)) }, (t, s2) => {
-    const k = typeof value === "function" ? share(value()) : value !== void 0 ? share(value) : smooth(Math.min(1, (t % loop + loop) % loop / fill));
+    const k = typeof value === "function" ? share2(value()) : value !== void 0 ? share2(value) : smooth(Math.min(1, (t % loop + loop) % loop / fill));
     const color = k >= 1 ? GOOD : ACCENT;
     s2.write(0, 0, label2);
     const x = label2.length;
     if (style === "ascii") {
-      const n = Math.round(k * (width - 2));
+      const n2 = Math.round(k * (width - 2));
       s2.write(x, 0, "[", MUTED);
       for (let i = 0; i < width - 2; i++)
-        s2.set(x + 1 + i, 0, i < n ? "#" : "-", i < n ? color : MUTED);
+        s2.set(x + 1 + i, 0, i < n2 ? "#" : "-", i < n2 ? color : MUTED);
       s2.write(x + width - 1, 0, "]", MUTED);
     } else if (style === "dots") {
-      const n = Math.round(k * width);
+      const n2 = Math.round(k * width);
       for (let i = 0; i < width; i++)
-        s2.set(x + i, 0, i < n ? "\u25CF" : "\u25CB", i < n ? color : MUTED);
+        s2.set(x + i, 0, i < n2 ? "\u25CF" : "\u25CB", i < n2 ? color : MUTED);
     } else {
       const eighths = Math.round(k * width * 8);
       for (let i = 0; i < width; i++) {
@@ -4957,7 +5056,7 @@ function sparkline(data, o) {
     [data, o] = [void 0, data];
   }
   const p = optionsOf3("sparkline()", o, ["label", "width", "height", "fill", ...WIDGET]);
-  const numbers = (v) => Array.isArray(v) && v.length >= 2 && v.every((n) => typeof n === "number" && Number.isFinite(n));
+  const numbers = (v) => Array.isArray(v) && v.length >= 2 && v.every((n2) => typeof n2 === "number" && Number.isFinite(n2));
   const live = typeof data === "function" ? data : null;
   if (data !== void 0 && !live && !numbers(data))
     fail2(`sparkline() takes a list of two or more numbers, such as [3, 5, 2, 8], or a function that returns one, not ${show2(data)}`);
@@ -5111,7 +5210,7 @@ var meta2 = {
 };
 var QUAD = " \u2597\u2596\u2584\u259D\u2590\u259E\u259F\u2598\u259A\u258C\u2599\u2580\u259C\u259B\u2588";
 var quad = (ul, ur, ll, lr) => QUAD[ul << 3 | ur << 2 | ll << 1 | lr];
-var ping = (n, i) => i % (2 * n - 2) < n ? i % (2 * n - 2) : 2 * n - 2 - i % (2 * n - 2);
+var ping = (n2, i) => i % (2 * n2 - 2) < n2 ? i % (2 * n2 - 2) : 2 * n2 - 2 - i % (2 * n2 - 2);
 var blank = (w, h) => Array.from({ length: h }, () => new Array(w).fill(" "));
 var rows = (g) => g.map((r) => r.join(""));
 var plot = (w, h, cells) => {
@@ -5143,8 +5242,8 @@ var SPINNERS = [
   }],
   ["arc", 1, (i) => {
     const ring2 = [[0, 0, "\u256D"], [1, 0, "\u2500"], [2, 0, "\u2500"], [3, 0, "\u2500"], [4, 0, "\u256E"], [4, 1, "\u2502"], [4, 2, "\u256F"], [3, 2, "\u2500"], [2, 2, "\u2500"], [1, 2, "\u2500"], [0, 2, "\u2570"], [0, 1, "\u2502"]];
-    const n = 3 + Math.round(ping(8, i) * 4 / 7);
-    return plot(5, 3, [...Array(n)].map((_, k) => ring2[(i + 12 - k) % 12]));
+    const n2 = 3 + Math.round(ping(8, i) * 4 / 7);
+    return plot(5, 3, [...Array(n2)].map((_, k) => ring2[(i + 12 - k) % 12]));
   }],
   ["bounce", 1, (i) => ["[" + " ".repeat(ping(6, i)) + "o" + " ".repeat(5 - ping(6, i)) + "]"]],
   ["clock", 3, (i) => {
@@ -5176,7 +5275,7 @@ var SPINNERS = [
   }]
 ];
 function spinners2({ names = meta2.options.names, labels = meta2.options.labels, speed: speed2 = meta2.options.speed } = {}) {
-  const chosen = names && names.length ? names.map((n) => SPINNERS.find((s2) => s2[0] === n)).filter(Boolean) : SPINNERS;
+  const chosen = names && names.length ? names.map((n2) => SPINNERS.find((s2) => s2[0] === n2)).filter(Boolean) : SPINNERS;
   const all = chosen === SPINNERS;
   const slot2 = 11, per = all ? 6 : Math.min(6, chosen.length);
   const block = labels || all ? 5 : 3;
@@ -5184,8 +5283,8 @@ function spinners2({ names = meta2.options.names, labels = meta2.options.labels,
   const height = all ? meta2.rows : Math.ceil(chosen.length / per) * (block + 1) + 1;
   return (t) => {
     const grid2 = Array.from({ length: height }, () => new Array(cols).fill(" "));
-    chosen.forEach(([name, frames, draw2], n) => {
-      const x0 = n % per * slot2, y0 = 1 + Math.floor(n / per) * (block + 1);
+    chosen.forEach(([name, frames, draw2], n2) => {
+      const x0 = n2 % per * slot2, y0 = 1 + Math.floor(n2 / per) * (block + 1);
       const art = draw2(Math.floor(t * meta2.fps * speed2 / frames + 1e-3));
       const top = y0 + Math.floor((3 - art.length) / 2);
       art.forEach((line2, j) => {
@@ -5293,8 +5392,8 @@ function cached(cache, key, make) {
   return v;
 }
 var bars = /* @__PURE__ */ new Map();
-function bar(share, width, opts2 = {}) {
-  const value = Math.max(0, Math.min(1, Number.isFinite(share) ? share : 0));
+function bar(share2, width, opts2 = {}) {
+  const value = Math.max(0, Math.min(1, Number.isFinite(share2) ? share2 : 0));
   const w = Math.max(4, Math.round(width));
   const key = `${w}|${opts2.label ?? ""}|${opts2.percent !== false}|${value.toFixed(4)}`;
   const b2 = cached(bars, key, () => {
@@ -5330,12 +5429,12 @@ function dial(value, max, opts2 = {}) {
   return frameOf(g.piece, g.frame, 0);
 }
 var DIAL_SIZE = { cols: 25, rows: 12 };
-function divider(n, label2) {
-  if (n <= 0) return "";
-  if (!label2) return "\u2500".repeat(n);
+function divider(n2, label2) {
+  if (n2 <= 0) return "";
+  if (!label2) return "\u2500".repeat(n2);
   const l = ` ${label2} `;
-  const side = Math.max(2, Math.floor((n - l.length) / 2));
-  return [..."\u2500".repeat(side) + l + "\u2500".repeat(n)].slice(0, n).join("");
+  const side = Math.max(2, Math.floor((n2 - l.length) / 2));
+  return [..."\u2500".repeat(side) + l + "\u2500".repeat(n2)].slice(0, n2).join("");
 }
 
 // src/args.ts
@@ -5526,9 +5625,9 @@ async function resolvePod(ctx, ref) {
 }
 function resolveCheckpoint(cps, ref) {
   if (/^#\d+$/.test(ref)) {
-    const n = Number(ref.slice(1));
+    const n2 = Number(ref.slice(1));
     const sorted = [...cps].sort((a, b2) => b2.at - a.at);
-    const cp = sorted[n - 1];
+    const cp = sorted[n2 - 1];
     if (!cp) throw new CliError(`no checkpoint ${ref}`, "list them with: airgate checkpoints <pod>");
     return cp;
   }
@@ -5656,13 +5755,13 @@ function duration2(seconds) {
 function hours(h) {
   return `${Math.round(h * 100) / 100}h`;
 }
-function usd(n) {
-  return `$${n.toFixed(2)}`;
+function usd(n2) {
+  return `$${n2.toFixed(2)}`;
 }
-function bytes(n) {
-  if (n < 1024) return `${n} B`;
-  if (n < 1024 * 1024) return `${(n / 1024).toFixed(1)} KiB`;
-  return `${(n / 1024 / 1024).toFixed(1)} MiB`;
+function bytes(n2) {
+  if (n2 < 1024) return `${n2} B`;
+  if (n2 < 1024 * 1024) return `${(n2 / 1024).toFixed(1)} KiB`;
+  return `${(n2 / 1024 / 1024).toFixed(1)} MiB`;
 }
 function date(ts) {
   if (!ts) return "-";
@@ -6132,8 +6231,8 @@ var US_PHONE_RE = /(?<![\w+.-])(?:1[-. ]?)?(?:\([2-9]\d{2}\)[ ]?|[2-9]\d{2}[-. ]
 var INTL_PHONE_RE = /(?<![\w+])\+\d{1,3}(?:[ .-]?\(?\d{1,5}\)?){1,6}(?![\w-]|\.\d)/g;
 var CUED_PHONE_RE = /\b(?:phone|tel|telephone|cell|mobile|fax|call|ph|whatsapp)\b\.?(?:[ \t]*(?:no\.?|number|#))?[ \t]*[:.]?[ \t]*(\+?\(?\d[\d \t().-]{5,}\d)/gi;
 var phoneDigitsOk = (min) => (s2) => {
-  const n = digitsOf(s2).length;
-  return n >= min && n <= 15;
+  const n2 = digitsOf(s2).length;
+  return n2 >= min && n2 <= 15;
 };
 var SSN_RE = /(?<![\d-])(?!000|666|9\d\d)\d{3}-(?!00)\d{2}-(?!0000)\d{4}(?![\d-])/g;
 var CUED_SSN_RE = /\b(?:SSN|social security(?:[ \t]+(?:number|no\.?))?)[ \t]*(?:#|no\.?|number)?[ \t]*[:.]?[ \t]*(\d{3}[ -]?\d{2}[ -]?\d{4})(?!\d)/gi;
@@ -6409,7 +6508,7 @@ var DETECTORS = [
 ];
 
 // ../mask/src/index.ts
-var defaultPlaceholder = (kind, n) => `[${kind}_${n}]`;
+var defaultPlaceholder = (kind, n2) => `[${kind}_${n2}]`;
 var escapeRe = (s2) => s2.replace(/[.*+?^${}()|[\]\\/]/g, "\\$&");
 function vaultKey(kind, value) {
   switch (kind) {
@@ -6456,9 +6555,9 @@ function createMasker(options = {}) {
     const key = vaultKey(kind, value);
     const existing = byKey.get(key);
     if (existing) return existing.placeholder;
-    const n = (counters.get(kind) ?? 0) + 1;
-    counters.set(kind, n);
-    const entry = { placeholder: makePlaceholder(kind, n), kind, original: value };
+    const n2 = (counters.get(kind) ?? 0) + 1;
+    counters.set(kind, n2);
+    const entry = { placeholder: makePlaceholder(kind, n2), kind, original: value };
     byKey.set(key, entry);
     byLoose.set(looseKey(coreOf(entry.placeholder)), entry);
     unmaskRe = null;
@@ -6471,8 +6570,8 @@ function createMasker(options = {}) {
       const entry = { placeholder: e.placeholder, kind: e.kind, original: e.original };
       byKey.set(key, entry);
       byLoose.set(looseKey(coreOf(entry.placeholder)), entry);
-      const n = Number(/(\d+)\D*$/.exec(e.placeholder)?.[1] ?? 0);
-      counters.set(e.kind, Math.max(counters.get(e.kind) ?? 0, n));
+      const n2 = Number(/(\d+)\D*$/.exec(e.placeholder)?.[1] ?? 0);
+      counters.set(e.kind, Math.max(counters.get(e.kind) ?? 0, n2));
     }
     unmaskRe = null;
   }
@@ -6690,7 +6789,7 @@ var mask = {
     if (r.spans.length) {
       const kinds = /* @__PURE__ */ new Map();
       for (const e of masker.entries()) kinds.set(e.kind, (kinds.get(e.kind) ?? 0) + 1);
-      ctx.ui.err(ctx.ui.ce("dim", `masked ${r.spans.length} \xB7 ${[...kinds].map(([k, n]) => `${k.toLowerCase()} ${n}`).join(", ")}`));
+      ctx.ui.err(ctx.ui.ce("dim", `masked ${r.spans.length} \xB7 ${[...kinds].map(([k, n2]) => `${k.toLowerCase()} ${n2}`).join(", ")}`));
     } else ctx.ui.err(ctx.ui.ce("dim", "nothing to mask."));
   }
 };
@@ -6724,7 +6823,7 @@ function attachSession(o) {
       return;
     }
     if (i > 0) send({ type: "input", data: s2.slice(0, i) });
-    finish({ reason: "detached" });
+    finish2({ reason: "detached" });
   };
   const restore = () => {
     if (restored) return;
@@ -6745,7 +6844,7 @@ function attachSession(o) {
     } catch {
     }
   };
-  function finish(end) {
+  function finish2(end) {
     restore();
     try {
       if (ws.readyState === 0 || ws.readyState === 1) ws.close(1e3, end.reason);
@@ -6754,7 +6853,7 @@ function attachSession(o) {
     settle(end);
   }
   function onTerm() {
-    finish({ reason: "closed", message: "signal" });
+    finish2({ reason: "closed", message: "signal" });
   }
   try {
     stdin.setRawMode?.(true);
@@ -6782,14 +6881,14 @@ function attachSession(o) {
       return;
     }
     if (msg.type === "output" && typeof msg.data === "string") stdout.write(msg.data);
-    else if (msg.type === "exit") finish({ reason: "exit", code: typeof msg.code === "number" ? msg.code : 0 });
+    else if (msg.type === "exit") finish2({ reason: "exit", code: typeof msg.code === "number" ? msg.code : 0 });
     else if (msg.type === "status" && msg.state === "waking") o.status?.("waking the pod\u2026");
   };
   ws.onerror = () => {
-    if (!restored) finish({ reason: "error", message: "connection error" });
+    if (!restored) finish2({ reason: "error", message: "connection error" });
   };
   ws.onclose = (ev) => {
-    if (!restored) finish({ reason: "closed", code: ev?.code, message: ev?.reason });
+    if (!restored) finish2({ reason: "closed", code: ev?.code, message: ev?.reason });
   };
   return done;
 }
@@ -6934,81 +7033,81 @@ async function readAll2(stream) {
   for await (const c of stream) s2 += c.toString();
   return s2;
 }
-async function readValue(ctx, name) {
+async function readValue(ctx, name, pipeHint = `printf %s "$VALUE" | airgate secrets set ${name}`) {
   if (ctx.io.stdin.isTTY) {
     const v2 = await ctx.io.prompt(`value for ${name} (hidden): `, { hidden: true });
     if (!v2) throw new CliError("empty value, nothing saved");
     return v2;
   }
   const v = (await readAll2(ctx.io.stdin)).replace(/\r?\n$/, "");
-  if (!v) throw new CliError("no value on stdin", `printf %s "$VALUE" | airgate secrets set ${name}`);
+  if (!v) throw new CliError("no value on stdin", pipeHint);
   return v;
 }
-function parseDotenv(text2) {
-  const values = {};
-  const skipped = [];
-  for (const raw of text2.split(/\r?\n/)) {
-    const line2 = raw.trim();
-    if (!line2 || line2.startsWith("#")) continue;
-    const m = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_.-]*)\s*=\s*(.*)$/.exec(line2);
-    if (!m) continue;
-    let v = m[2];
-    if (v.startsWith('"')) {
-      const end = v.lastIndexOf('"');
-      v = v.slice(1, end > 0 ? end : void 0).replace(/\\(["\\n])/g, (_s, c) => c === "n" ? "\n" : c);
-    } else if (v.startsWith("'")) {
-      const end = v.lastIndexOf("'");
-      v = v.slice(1, end > 0 ? end : void 0);
-    } else v = v.replace(/\s+#.*$/, "").trim();
-    if (NAME_RE.test(m[1]) && !m[1].startsWith("AIRGATE_")) values[m[1]] = v;
-    else skipped.push(m[1]);
-  }
-  return { values, skipped };
+function parseDotenv2(text2) {
+  const r = parseDotenv(text2);
+  return {
+    values: r.values,
+    skipped: r.entries.filter((e) => !e.name).map((e) => e.key),
+    renamed: r.entries.filter((e) => e.name && e.name !== e.key).map((e) => `${e.key} \u2192 ${e.name}`)
+  };
 }
-async function sendDotenv(ctx, file, podId) {
-  const path = resolve3(ctx.io.cwd, file);
-  let text2;
+function readDotenvFile(ctx, file, hint) {
   try {
-    text2 = readFileSync2(path, "utf8");
+    return readFileSync2(resolve3(ctx.io.cwd, file), "utf8");
   } catch {
-    throw new CliError(`can't read ${file}`, "airgate up --env path/to/.env");
+    throw new CliError(`can't read ${file}`, hint);
   }
-  const { values, skipped } = parseDotenv(text2);
-  const sent = [];
-  const failed = [];
-  for (const [k, v] of Object.entries(values)) {
-    try {
-      await ctx.api.setSecret(k, v, podId);
-      sent.push(k);
-    } catch (e) {
-      if (e instanceof ApiError && e.status < 500) failed.push(`${k} (${e.message})`);
-      else throw e;
-    }
+}
+async function sendDotenv(ctx, file, podId) {
+  const { values, skipped, renamed } = parseDotenv2(readDotenvFile(ctx, file, "airgate up --env path/to/.env"));
+  if (!Object.keys(values).length) return { sent: [], skipped, renamed, failed: [] };
+  try {
+    const r = await ctx.api.setSecrets(values, podId);
+    return { sent: [...r.created, ...r.updated], skipped, renamed, failed: [] };
+  } catch (e) {
+    if (e instanceof ApiError && e.status < 500) return { sent: [], skipped, renamed, failed: [e.message] };
+    throw e;
   }
-  return { sent, skipped, failed };
 }
 var secrets = {
   name: "secrets",
   aliases: ["secret"],
   group: "pods",
-  usage: "[set NAME | rm NAME] [--pod p]",
+  usage: "[set NAME | rm NAME | import FILE] [--pod p] [--dotenv]",
   summary: "environment variables for pods, stored encrypted, never shown again",
-  example: "airgate secrets set STRIPE_KEY --pod api",
+  example: "airgate secrets import .env --pod api",
   notes: [
     "set reads the value from a hidden prompt, or from stdin when piped (never from the command line).",
     "account-wide unless --pod; a pod value overrides an account one. pods load them into ~/.airgate/secrets.env when they start or wake.",
-    "every value of 6+ characters is masked before it reaches a model, even if the agent reads it."
+    "every value of 6+ characters is masked before it reaches a model, even if the agent reads it.",
+    "import FILE saves every KEY=value in a .env file at once (quotes, export, multiline values); ls --dotenv prints the names as a .env.example."
   ],
   flags: {
-    pod: { type: "string", value: "pod", help: "just this pod (default: every pod)" }
+    pod: { type: "string", value: "pod", help: "just this pod (default: every pod)" },
+    dotenv: { type: "boolean", help: "ls: print the names as a .env.example (no values)" }
   },
   async run(ctx) {
     const [action, name, extra] = ctx.args.positionals;
     if (extra !== void 0) throw new UsageError(`unexpected "${extra}"`, "values are read from a hidden prompt or stdin, never from arguments");
     const podRef = str(ctx.args, "pod");
     const pod = podRef ? await resolvePod(ctx, podRef) : void 0;
+    if (action === "import") {
+      if (!name) throw new UsageError("which file? airgate secrets import .env [--pod p]");
+      const r = await ctx.ui.spin(`saving ${name}`, sendDotenv(ctx, name, pod?.id));
+      if (ctx.json) return ctx.ui.json(r);
+      if (r.failed.length) throw new CliError(`nothing saved: ${r.failed.join("; ")}`);
+      if (!r.sent.length) throw new CliError(`no KEY=value lines in ${name}`);
+      ctx.ui.out(`${ctx.ui.c("ok", "saved")} ${r.sent.length} for ${pod ? pod.spec.name : "every pod"}: ${r.sent.join(", ")}`);
+      if (r.renamed.length) ctx.ui.out(ctx.ui.c("dim", `renamed: ${r.renamed.join(", ")}`));
+      if (r.skipped.length) ctx.ui.err(ctx.ui.ce("warn", `skipped (reserved or unusable names): ${r.skipped.join(", ")}`));
+      return;
+    }
     if (!action || action === "list" || action === "ls") {
       const all = await ctx.api.secrets();
+      if (bool(ctx.args, "dotenv")) {
+        const names = [...all.account.map((s2) => s2.name), ...pod ? (all.pods[pod.id] ?? []).map((s2) => s2.name) : []];
+        return void ctx.io.stdout.write(dotenvExample([...new Set(names)].sort()));
+      }
       if (ctx.json) return ctx.ui.json(pod ? { account: all.account, pod: all.pods[pod.id] ?? [] } : all);
       const podNames2 = new Map((await ctx.api.pods()).map((p) => [p.id, p.spec.name]));
       const rows2 = [];
@@ -7040,11 +7139,14 @@ var secrets = {
       ctx.ui.out(`removed ${name} from ${pod ? pod.spec.name : "the account"}. ${r.note}.`);
       return;
     }
-    throw new UsageError(`unknown action "${action}"`, "airgate secrets [set NAME | rm NAME] [--pod p]");
+    throw new UsageError(`unknown action "${action}"`, "airgate secrets [set NAME | rm NAME | import FILE] [--pod p]");
   }
 };
 
 // src/commands/pods.ts
+import { execFileSync } from "node:child_process";
+import { readFileSync as readFileSync3 } from "node:fs";
+import { resolve as resolvePath } from "node:path";
 var AGENT_NAMES = Object.keys(AGENTS);
 var SIZE_NAMES = Object.keys(SIZES);
 var NETWORK_NAMES = ["allowlist", "open", "off"];
@@ -7060,9 +7162,9 @@ function cronProblem(cron) {
   if (!cronValid(cron)) return `"${cron}" isn't a 5-field cron (min hour day month weekday, utc)`;
   let t = cronNext(cron);
   for (let i = 0; i < 12 && t !== null; i++) {
-    const n = cronNext(cron, t);
-    if (n !== null && n - t < 15 * 6e4) return `"${cron}" runs more often than every 15 minutes`;
-    t = n;
+    const n2 = cronNext(cron, t);
+    if (n2 !== null && n2 - t < 15 * 6e4) return `"${cron}" runs more often than every 15 minutes`;
+    t = n2;
   }
   return null;
 }
@@ -7125,7 +7227,7 @@ var pods = {
 var launch = {
   name: "launch",
   group: "pods",
-  usage: "[--name n] [--template t] [--agent a] [--memory m] [--browser] [--repo owner/name] [--cron c --task t \u2026] [--model m] [--no-mask] [--no-undo] [--network n]",
+  usage: "[--name n] [--template t] [--agent a] [--memory m] [--browser] [--repo owner/name|.] [--env .env] [--cron c --task t \u2026] [--model m] [--no-mask] [--no-undo] [--network n]",
   summary: "start a new pod",
   example: "airgate launch --name fix-nav --agent codex --repo acme/web",
   notes: [
@@ -7143,7 +7245,8 @@ var launch = {
     "builtin-model": { type: "boolean", help: "autopilot with opencode: use airgate's built-in model (no subscription)" },
     model: { type: "string", value: "id", help: "built-in model: an openrouter id (default: the gateway's); see airgate templates" },
     memory: { type: "string", value: "size", choices: Object.keys(SIZES), default: "standard", help: `standard 8 GB | large 16 GB (pro, ${addOnPrice(ADD_ONS.large.usdPerHour)})` },
-    repo: { type: "string", value: "owner/name", help: "GitHub repo to clone (private ones: airgate github connect)" },
+    repo: { type: "string", value: "owner/name", help: "GitHub repo to clone, a github link, or . for this folder's repo (private ones: airgate github connect)" },
+    env: { type: "string", value: "file", help: "a .env file: its keys become this pod's secrets before it boots" },
     "public-repo": { type: "boolean", help: "the repo is public: don't check it against your GitHub App" },
     mask: { type: "boolean", default: true, help: "mask model traffic (--no-mask to turn off)" },
     undo: { type: "boolean", default: true, help: "checkpoint after every agent step (--no-undo to turn off)" },
@@ -7156,16 +7259,48 @@ var launch = {
     if (ctx.args.positionals.length) throw new UsageError(`unexpected "${ctx.args.positionals[0]}"`, "name the pod with --name");
     const spec = specFromFlags(ctx);
     if (spec.repo) await checkRepo(ctx, spec.repo);
-    const pod = await ctx.ui.spin(`launching ${spec.name}`, async () => waitReady(ctx, await ctx.api.launch(spec)));
+    const envFile = str(ctx.args, "env");
+    let secrets2;
+    if (envFile) {
+      const { values, skipped, renamed } = parseDotenv2(readDotenv(ctx, envFile));
+      secrets2 = values;
+      if (renamed.length) ctx.ui.err(ctx.ui.ce("dim", `renamed: ${renamed.join(", ")}`));
+      if (skipped.length) ctx.ui.err(ctx.ui.ce("warn", `skipped (reserved or unusable names): ${skipped.join(", ")}`));
+    }
+    const pod = await ctx.ui.spin(`launching ${spec.name}`, async () => waitReady(ctx, await ctx.api.launch(spec, void 0, secrets2)));
+    if (secrets2 && Object.keys(secrets2).length && !ctx.json) ctx.ui.out(`secrets for ${pod.spec.name}: ${Object.keys(secrets2).join(", ")}`);
     if (ctx.json) return ctx.ui.json(pod);
     ctx.ui.out(readyLine(ctx, pod));
     if ((pod.spec.template ?? "code") === "autopilot") {
-      const n = pod.spec.jobs?.length ?? 0;
+      const n2 = pod.spec.jobs?.length ?? 0;
       if (!pod.spec.builtinModel) ctx.ui.out(`sign ${AGENTS[pod.spec.agent].label} in once: airgate attach ${pod.spec.name}`);
-      ctx.ui.out(n ? `${n} job${n === 1 ? "" : "s"}: airgate jobs ${pod.spec.name}` : `add a job: airgate job add ${pod.spec.name} --cron "0 2 * * *" --task "\u2026"`);
+      ctx.ui.out(n2 ? `${n2} job${n2 === 1 ? "" : "s"}: airgate jobs ${pod.spec.name}` : `add a job: airgate job add ${pod.spec.name} --cron "0 2 * * *" --task "\u2026"`);
     } else ctx.ui.out(`next: airgate attach ${pod.spec.name}`);
   }
 };
+function repoArg(ctx, raw) {
+  if (raw === void 0) return void 0;
+  let input = raw;
+  if (raw === ".") {
+    try {
+      input = execFileSync("git", ["remote", "get-url", "origin"], { cwd: ctx.io.cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+    } catch {
+      throw new UsageError("--repo .: this folder has no git remote called origin");
+    }
+  }
+  const s2 = input.trim().replace(/\.git$/, "").replace(/^git@github\.com:/, "").replace(/^(?:https?:\/\/)?(?:www\.)?github\.com\//, "");
+  const [owner, name] = s2.split(/[/#?]/);
+  const repo = owner && name ? `${owner}/${name}` : "";
+  if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repo)) throw new UsageError(raw === "." ? `--repo .: origin isn't a github repo (${input})` : "--repo: owner/name or a github link");
+  return repo;
+}
+function readDotenv(ctx, file) {
+  try {
+    return readFileSync3(resolvePath(ctx.io.cwd, file), "utf8");
+  } catch {
+    throw new CliError(`can't read ${file}`, "airgate launch --env path/to/.env");
+  }
+}
 function specFromFlags(ctx, defaults = {}) {
   const a = ctx.args;
   const network = str(a, "network") ?? "allowlist";
@@ -7176,8 +7311,7 @@ function specFromFlags(ctx, defaults = {}) {
     autoStopMinutes = Number(autoStop);
     if (!Number.isInteger(autoStopMinutes) || autoStopMinutes < 1) throw new UsageError("--auto-stop: whole idle minutes \u2265 1, or keep-awake");
   }
-  const repo = str(a, "repo");
-  if (repo && !/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repo)) throw new UsageError("--repo: owner/name");
+  const repo = repoArg(ctx, str(a, "repo"));
   const template = str(a, "template") ?? "code";
   const t = TEMPLATES[template];
   const agent = str(a, "agent") ?? (defaults.agent && t.agents.includes(defaults.agent) ? defaults.agent : t.agents[0]);
@@ -7307,7 +7441,6 @@ var destroy = {
 };
 var exec = {
   name: "exec",
-  aliases: ["run"],
   group: "pods",
   usage: "<pod> -- <command\u2026>",
   summary: "run a command in the pod (bash -c, in ~/workspace) and print its output",
@@ -7330,7 +7463,7 @@ var exec = {
 };
 
 // src/commands/jobs.ts
-var price = (n) => `$${n.toFixed(2)}/h`;
+var price = (n2) => `$${n2.toFixed(2)}/h`;
 var templates = {
   name: "templates",
   group: "pods",
@@ -7528,199 +7661,16 @@ var log = {
 // src/commands/mcp.ts
 import { createInterface } from "node:readline";
 
-// src/io.ts
-import { spawn } from "node:child_process";
-import { EventEmitter } from "node:events";
-import { PassThrough } from "node:stream";
-import { StringDecoder as StringDecoder2 } from "node:string_decoder";
-var LineReader = class {
-  buf = "";
-  ended = false;
-  waiters = [];
-  stream;
-  attached = false;
-  decoder = new StringDecoder2("utf8");
-  constructor(stream) {
-    this.stream = stream;
-  }
-  attach() {
-    if (this.attached) return;
-    this.attached = true;
-    this.stream.on("data", (d) => {
-      this.buf += typeof d === "string" ? d : this.decoder.write(d);
-      this.wake();
-    });
-    this.stream.on("end", () => {
-      this.ended = true;
-      this.wake();
-    });
-    this.stream.on("error", () => {
-      this.ended = true;
-      this.wake();
-    });
-  }
-  wake() {
-    for (const w of this.waiters.splice(0)) w();
-  }
-  async line() {
-    this.attach();
-    this.stream.resume();
-    for (; ; ) {
-      const i = this.buf.indexOf("\n");
-      if (i !== -1) {
-        const l = this.buf.slice(0, i).replace(/\r$/, "");
-        this.buf = this.buf.slice(i + 1);
-        if (!this.buf) this.stream.pause();
-        return l;
-      }
-      if (this.ended) {
-        const rest = this.buf;
-        this.buf = "";
-        return rest ? rest : null;
-      }
-      await new Promise((r) => this.waiters.push(r));
-    }
-  }
-};
-function ttyPrompt(stdin, out) {
-  return (question, opts2 = {}) => new Promise((resolve5, reject) => {
-    out.write(question);
-    const decoder = new StringDecoder2("utf8");
-    let answer = "";
-    const wasRaw = Boolean(stdin.isRaw);
-    stdin.setRawMode?.(true);
-    stdin.resume();
-    const done = (err) => {
-      stdin.off("data", onData);
-      stdin.setRawMode?.(wasRaw);
-      stdin.pause();
-      out.write("\n");
-      if (err) reject(err);
-      else resolve5(answer);
-    };
-    const onData = (d) => {
-      for (const ch of decoder.write(d)) {
-        if (ch === "\r" || ch === "\n") return done();
-        if (ch === "") return done(Object.assign(new Error("cancelled"), { code: "cancelled" }));
-        if (ch === "") {
-          if (!answer) return done(Object.assign(new Error("cancelled"), { code: "cancelled" }));
-          continue;
-        }
-        if (ch === "\x7F" || ch === "\b") {
-          if (answer) {
-            answer = [...answer].slice(0, -1).join("");
-            if (!opts2.hidden) out.write("\b \b");
-          }
-          continue;
-        }
-        if (ch < " ") continue;
-        answer += ch;
-        if (!opts2.hidden) out.write(ch);
-      }
-    };
-    stdin.on("data", onData);
-  });
-}
-function openInBrowser(url) {
-  const [cmd, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", '""', url]] : ["xdg-open", [url]];
-  return new Promise((resolve5) => {
-    try {
-      const child = spawn(cmd, args, { stdio: "ignore", detached: true });
-      child.on("error", () => resolve5(false));
-      child.on("spawn", () => {
-        child.unref();
-        resolve5(true);
-      });
-    } catch {
-      resolve5(false);
-    }
-  });
-}
-function processIo() {
-  const stdin = process.stdin;
-  const lines = new LineReader(stdin);
-  const tty = ttyPrompt(stdin, process.stderr);
-  return {
-    stdin,
-    stdout: process.stdout,
-    stderr: process.stderr,
-    env: process.env,
-    // `npm run cli -- up` runs in packages/cli; INIT_CWD is where the user typed it
-    cwd: process.env.AIRGATE_CWD || process.env.npm_lifecycle_event === "dev" && process.env.INIT_CWD || process.cwd(),
-    async prompt(q, o) {
-      if (stdin.isTTY) return tty(q, o);
-      process.stderr.write(q);
-      const l = await lines.line();
-      if (l === null) throw Object.assign(new Error("no input (stdin closed)"), { code: "no_input" });
-      process.stderr.write("\n");
-      return l;
-    },
-    openUrl: openInBrowser,
-    websocket: (url) => new WebSocket(url),
-    signals: process
-  };
-}
-function memoryIo(opts2 = {}) {
-  const out = new PassThrough();
-  const err = new PassThrough();
-  let stdout = "";
-  let stderr = "";
-  out.on("data", (d) => stdout += d.toString());
-  err.on("data", (d) => stderr += d.toString());
-  const answers = [...opts2.answers ?? []];
-  const opened = [];
-  const prompts = [];
-  const stdin = opts2.stdin ?? Object.assign(new PassThrough(), { isTTY: false });
-  if (!opts2.stdin) stdin.end();
-  const io = {
-    stdin,
-    stdout: out,
-    stderr: err,
-    env: opts2.env ?? {},
-    cwd: opts2.cwd ?? process.cwd(),
-    async prompt(q) {
-      prompts.push(q);
-      const a = answers.shift();
-      if (a === void 0) throw Object.assign(new Error(`no answer queued for prompt: ${q}`), { code: "no_input" });
-      return a;
-    },
-    async openUrl(u) {
-      opened.push(u);
-      return true;
-    },
-    websocket: () => {
-      throw new Error("no websocket in memoryIo");
-    },
-    signals: new EventEmitter()
-  };
-  return {
-    io,
-    answers,
-    opened,
-    prompts,
-    get stdout() {
-      return stdout;
-    },
-    get stderr() {
-      return stderr;
-    },
-    clear() {
-      stdout = "";
-      stderr = "";
-    }
-  };
-}
-
 // src/version.ts
-var VERSION = "0.1.0";
+var VERSION = "0.1.3";
 
 // src/commands/updown.ts
-import { appendFileSync, existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync4, realpathSync as realpathSync2, statSync as statSync2, writeFileSync as writeFileSync3 } from "node:fs";
+import { appendFileSync, existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync5, realpathSync as realpathSync2, statSync as statSync2, writeFileSync as writeFileSync3 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
 import { basename, dirname as dirname2, isAbsolute, join as join4, relative as relative2, resolve as resolve4 } from "node:path";
 
 // src/pack.ts
-import { spawn as spawn2, spawnSync } from "node:child_process";
+import { spawn, spawnSync } from "node:child_process";
 import { existsSync, lstatSync } from "node:fs";
 import { join as join2 } from "node:path";
 var UPLOAD_LIMIT = 32 * 6 * 1024 * 1024;
@@ -7759,8 +7709,8 @@ function gitFiles(dir) {
   return out;
 }
 function runTar(cwd, args, input, limit = UPLOAD_LIMIT) {
-  return new Promise((resolve5, reject) => {
-    const child = spawn2("tar", args, { cwd, env: { ...process.env, COPYFILE_DISABLE: "1" }, stdio: ["pipe", "pipe", "pipe"] });
+  return new Promise((resolve6, reject) => {
+    const child = spawn("tar", args, { cwd, env: { ...process.env, COPYFILE_DISABLE: "1" }, stdio: ["pipe", "pipe", "pipe"] });
     const chunks = [];
     let size2 = 0;
     let err = "";
@@ -7779,7 +7729,7 @@ function runTar(cwd, args, input, limit = UPLOAD_LIMIT) {
     child.on("close", (code3) => {
       if (over2) return reject(new TooLargeError(limit));
       if (code3 !== 0) return reject(new Error(`tar failed: ${err.trim().split("\n").slice(-3).join(" ")}`));
-      resolve5(Buffer.concat(chunks));
+      resolve6(Buffer.concat(chunks));
     });
     child.stdin.on("error", () => void 0);
     child.stdin.end(input ?? "");
@@ -7815,7 +7765,7 @@ import { gunzipSync } from "node:zlib";
 
 // src/sessions.ts
 import { createHash, randomUUID } from "node:crypto";
-import { closeSync, existsSync as existsSync2, mkdirSync as mkdirSync2, mkdtempSync, openSync, readdirSync, readFileSync as readFileSync3, readSync, realpathSync, renameSync as renameSync2, rmSync as rmSync2, statSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { closeSync, existsSync as existsSync2, mkdirSync as mkdirSync2, mkdtempSync, openSync, readdirSync, readFileSync as readFileSync4, readSync, realpathSync, renameSync as renameSync2, rmSync as rmSync2, statSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { tmpdir } from "node:os";
 import { dirname, join as join3, relative } from "node:path";
 var POD_HOME = "/home/sprite";
@@ -7843,15 +7793,15 @@ function findClaudeSession(home, projectDir, id, env = {}) {
     const dir = join3(claudeHome(home, env), "projects", claudeKey(p));
     let names = [];
     try {
-      names = readdirSync(dir).filter((n) => n.endsWith(".jsonl"));
+      names = readdirSync(dir).filter((n2) => n2.endsWith(".jsonl"));
     } catch {
       continue;
     }
-    for (const n of names) {
-      const sid = n.slice(0, -".jsonl".length);
+    for (const n2 of names) {
+      const sid = n2.slice(0, -".jsonl".length);
       if (id && sid !== id) continue;
       if (!ID_RE.test(sid)) continue;
-      const file = join3(dir, n);
+      const file = join3(dir, n2);
       const side = join3(dir, sid);
       best.push({ agent: "claude-code", id: sid, file, mtime: statSync(file).mtimeMs, ...existsSync2(side) && statSync(side).isDirectory() ? { sidecar: side } : {} });
     }
@@ -7863,8 +7813,8 @@ function firstLine(file) {
   const fd = openSync(file, "r");
   try {
     const buf = Buffer.alloc(1024 * 1024);
-    const n = readSync(fd, buf, 0, buf.length, 0);
-    return buf.subarray(0, n).toString("utf8").split("\n")[0];
+    const n2 = readSync(fd, buf, 0, buf.length, 0);
+    return buf.subarray(0, n2).toString("utf8").split("\n")[0];
   } finally {
     closeSync(fd);
   }
@@ -7920,7 +7870,7 @@ async function packSession(s2, projectDir, podPath, limit = UPLOAD_LIMIT) {
   const froms = spellings(projectDir);
   const stage = mkdtempSync(join3(tmpdir(), "airgate-session-"));
   try {
-    const raw = readFileSync3(s2.file);
+    const raw = readFileSync4(s2.file);
     let podDir;
     const names = [];
     if (s2.agent === "claude-code") {
@@ -7936,7 +7886,7 @@ async function packSession(s2, projectDir, podPath, limit = UPLOAD_LIMIT) {
               mkdirSync2(b2, { recursive: true });
               copy2(a, b2);
             } else if (x.isFile()) {
-              const body = readFileSync3(a);
+              const body = readFileSync4(a);
               writeFileSync2(b2, /\.(jsonl?|txt|md)$/.test(x.name) ? rewriteAll(body.toString("utf8"), froms, podPath) : body);
             }
           }
@@ -7968,7 +7918,7 @@ function bringBack(sent, podContent, now = /* @__PURE__ */ new Date()) {
   let text2 = rewritePath(podContent.toString("utf8"), sent.podPath, sent.localPath);
   const localId = sent.localId ?? sent.id;
   if (localId !== sent.id) text2 = text2.split(sent.id).join(localId);
-  const local = existsSync2(sent.file) ? readFileSync3(sent.file) : null;
+  const local = existsSync2(sent.file) ? readFileSync4(sent.file) : null;
   if (local && local.toString("utf8") === text2) return { agent: sent.agent, id: localId, file: sent.file, outcome: "same", sha256: sha256(local) };
   const atomic = (file2, body2) => {
     mkdirSync2(dirname(file2), { recursive: true });
@@ -7985,7 +7935,7 @@ function bringBack(sent, podContent, now = /* @__PURE__ */ new Date()) {
   let file;
   if (sent.agent === "claude-code") file = join3(dirname(sent.file), `${id}.jsonl`);
   else {
-    const p = (n) => String(n).padStart(2, "0");
+    const p = (n2) => String(n2).padStart(2, "0");
     const root = join3(dirname(sent.file), "..", "..", "..");
     const stamp = `${now.getFullYear()}-${p(now.getMonth() + 1)}-${p(now.getDate())}T${p(now.getHours())}-${p(now.getMinutes())}-${p(now.getSeconds())}`;
     file = join3(root, String(now.getFullYear()), p(now.getMonth() + 1), p(now.getDate()), `rollout-${stamp}-${id}.jsonl`);
@@ -8031,11 +7981,11 @@ function unquote(p) {
       bytes2.push(...Buffer.from(c, "utf8"));
       continue;
     }
-    const n = p[++i];
-    if (/[0-7]/.test(n)) {
+    const n2 = p[++i];
+    if (/[0-7]/.test(n2)) {
       bytes2.push(parseInt(p.slice(i, i + 3), 8));
       i += 2;
-    } else bytes2.push(simple[n] ?? n.charCodeAt(0));
+    } else bytes2.push(simple[n2] ?? n2.charCodeAt(0));
   }
   return Buffer.from(bytes2).toString("utf8");
 }
@@ -8171,7 +8121,7 @@ function findState(from) {
     const p = statePath(dir);
     if (existsSync3(p)) {
       try {
-        const s2 = JSON.parse(readFileSync4(p, "utf8"));
+        const s2 = JSON.parse(readFileSync5(p, "utf8"));
         if (s2 && typeof s2.podId === "string" && typeof s2.dir === "string") return { root: dir, state: s2 };
       } catch {
       }
@@ -8187,7 +8137,7 @@ function excludeStateDir(projectDir) {
   if (r.status !== 0) return false;
   const raw = r.stdout.trim();
   const file = isAbsolute(raw) ? raw : join4(projectDir, raw);
-  const current = existsSync3(file) ? readFileSync4(file, "utf8") : "";
+  const current = existsSync3(file) ? readFileSync5(file, "utf8") : "";
   if (current.split(/\r?\n/).some((l) => l.trim() === ".airgate/" || l.trim() === "/.airgate/" || l.trim() === ".airgate")) return true;
   mkdirSync3(dirname2(file), { recursive: true });
   appendFileSync(file, `${current && !current.endsWith("\n") ? "\n" : ""}# airgate up/down state
@@ -8196,8 +8146,8 @@ function excludeStateDir(projectDir) {
   return true;
 }
 function podDirName(projectDir) {
-  const n = basename(resolve4(projectDir)).replace(/[^A-Za-z0-9._-]+/g, "-").replace(/^[.-]+/, "");
-  return n && n !== "." && n !== ".." ? n.slice(0, 64) : "project";
+  const n2 = basename(resolve4(projectDir)).replace(/[^A-Za-z0-9._-]+/g, "-").replace(/^[.-]+/, "");
+  return n2 && n2 !== "." && n2 !== ".." ? n2.slice(0, 64) : "project";
 }
 var up = {
   name: "up",
@@ -8507,30 +8457,654 @@ ${check.stderr.trim()}`, "commit or stash local edits to those files, or look wi
   }
 };
 
-// src/commands/mcp.ts
-var PROTOCOL_VERSION = "2025-06-18";
-var obj = (properties, required = []) => ({ type: "object", properties, required, additionalProperties: false });
-var s = (description, extra = {}) => ({ type: "string", description, ...extra });
-var b = (description) => ({ type: "boolean", description });
-var POD = s("pod name or id (a unique prefix is enough)");
-var need = (args, key) => {
-  const v = args[key];
-  if (typeof v !== "string" || !v.trim()) throw new UsageError(`${key} is required`);
-  return v;
-};
-async function runCommand(ctx, cmd, argv, cwd) {
-  const m = memoryIo({ env: ctx.io.env, cwd });
-  const args = parseArgs([...argv, "--json"], cmd.flags ?? {});
-  const sub = { ...makeCtx(m.io, createUi(m.io), args, ctx.fetch), api: ctx.api };
-  await cmd.run(sub);
-  const out = m.stdout.trim();
-  try {
-    return out ? JSON.parse(out) : { ok: true };
-  } catch {
-    return { output: out };
-  }
-}
-var jobSchema = obj(
+// src/io.ts
+import { spawn as spawn2 } from "node:child_process";
+import { EventEmitter } from "node:events";
+import { PassThrough } from "node:stream";
+import { StringDecoder as StringDecoder2 } from "node:string_decoder";
+var LineReader = class {
+  buf = "";
+  ended = false;
+  waiters = [];
+  stream;
+  attached = false;
+  decoder = new StringDecoder2("utf8");
+  constructor(stream) {
+    this.stream = stream;
+  }
+  attach() {
+    if (this.attached) return;
+    this.attached = true;
+    this.stream.on("data", (d) => {
+      this.buf += typeof d === "string" ? d : this.decoder.write(d);
+      this.wake();
+    });
+    this.stream.on("end", () => {
+      this.ended = true;
+      this.wake();
+    });
+    this.stream.on("error", () => {
+      this.ended = true;
+      this.wake();
+    });
+  }
+  wake() {
+    for (const w of this.waiters.splice(0)) w();
+  }
+  async line() {
+    this.attach();
+    this.stream.resume();
+    for (; ; ) {
+      const i = this.buf.indexOf("\n");
+      if (i !== -1) {
+        const l = this.buf.slice(0, i).replace(/\r$/, "");
+        this.buf = this.buf.slice(i + 1);
+        if (!this.buf) this.stream.pause();
+        return l;
+      }
+      if (this.ended) {
+        const rest = this.buf;
+        this.buf = "";
+        return rest ? rest : null;
+      }
+      await new Promise((r) => this.waiters.push(r));
+    }
+  }
+};
+function ttyPrompt(stdin, out) {
+  return (question, opts2 = {}) => new Promise((resolve6, reject) => {
+    out.write(question);
+    const decoder = new StringDecoder2("utf8");
+    let answer = "";
+    const wasRaw = Boolean(stdin.isRaw);
+    stdin.setRawMode?.(true);
+    stdin.resume();
+    const done = (err) => {
+      stdin.off("data", onData);
+      stdin.setRawMode?.(wasRaw);
+      stdin.pause();
+      out.write("\n");
+      if (err) reject(err);
+      else resolve6(answer);
+    };
+    const onData = (d) => {
+      for (const ch of decoder.write(d)) {
+        if (ch === "\r" || ch === "\n") return done();
+        if (ch === "") return done(Object.assign(new Error("cancelled"), { code: "cancelled" }));
+        if (ch === "") {
+          if (!answer) return done(Object.assign(new Error("cancelled"), { code: "cancelled" }));
+          continue;
+        }
+        if (ch === "\x7F" || ch === "\b") {
+          if (answer) {
+            answer = [...answer].slice(0, -1).join("");
+            if (!opts2.hidden) out.write("\b \b");
+          }
+          continue;
+        }
+        if (ch < " ") continue;
+        answer += ch;
+        if (!opts2.hidden) out.write(ch);
+      }
+    };
+    stdin.on("data", onData);
+  });
+}
+function openInBrowser(url) {
+  const [cmd, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", '""', url]] : ["xdg-open", [url]];
+  return new Promise((resolve6) => {
+    try {
+      const child = spawn2(cmd, args, { stdio: "ignore", detached: true });
+      child.on("error", () => resolve6(false));
+      child.on("spawn", () => {
+        child.unref();
+        resolve6(true);
+      });
+    } catch {
+      resolve6(false);
+    }
+  });
+}
+function processIo() {
+  const stdin = process.stdin;
+  const lines = new LineReader(stdin);
+  const tty = ttyPrompt(stdin, process.stderr);
+  return {
+    stdin,
+    stdout: process.stdout,
+    stderr: process.stderr,
+    env: process.env,
+    // `npm run cli -- up` runs in packages/cli; INIT_CWD is where the user typed it
+    cwd: process.env.AIRGATE_CWD || process.env.npm_lifecycle_event === "dev" && process.env.INIT_CWD || process.cwd(),
+    async prompt(q, o) {
+      if (stdin.isTTY) return tty(q, o);
+      process.stderr.write(q);
+      const l = await lines.line();
+      if (l === null) throw Object.assign(new Error("no input (stdin closed)"), { code: "no_input" });
+      process.stderr.write("\n");
+      return l;
+    },
+    openUrl: openInBrowser,
+    websocket: (url) => new WebSocket(url),
+    signals: process
+  };
+}
+function memoryIo(opts2 = {}) {
+  const out = new PassThrough();
+  const err = new PassThrough();
+  let stdout = "";
+  let stderr = "";
+  out.on("data", (d) => stdout += d.toString());
+  err.on("data", (d) => stderr += d.toString());
+  const answers = [...opts2.answers ?? []];
+  const opened = [];
+  const prompts = [];
+  const stdin = opts2.stdin ?? Object.assign(new PassThrough(), { isTTY: false });
+  if (!opts2.stdin) stdin.end();
+  const io = {
+    stdin,
+    stdout: out,
+    stderr: err,
+    env: opts2.env ?? {},
+    cwd: opts2.cwd ?? process.cwd(),
+    async prompt(q) {
+      prompts.push(q);
+      const a = answers.shift();
+      if (a === void 0) throw Object.assign(new Error(`no answer queued for prompt: ${q}`), { code: "no_input" });
+      return a;
+    },
+    async openUrl(u) {
+      opened.push(u);
+      return true;
+    },
+    websocket: () => {
+      throw new Error("no websocket in memoryIo");
+    },
+    signals: new EventEmitter()
+  };
+  return {
+    io,
+    answers,
+    opened,
+    prompts,
+    get stdout() {
+      return stdout;
+    },
+    get stderr() {
+      return stderr;
+    },
+    clear() {
+      stdout = "";
+      stderr = "";
+    }
+  };
+}
+
+// src/commands/sub.ts
+async function runCommand(ctx, cmd, argv, cwd) {
+  const m = memoryIo({ env: ctx.io.env, cwd });
+  const args = parseArgs([...argv, "--json"], cmd.flags ?? {});
+  const sub = { ...makeCtx(m.io, createUi(m.io), args, ctx.fetch), api: ctx.api };
+  await cmd.run(sub);
+  const out = m.stdout.trim();
+  try {
+    return out ? JSON.parse(out) : { ok: true };
+  } catch {
+    return { output: out };
+  }
+}
+
+// src/commands/run.ts
+import { existsSync as existsSync5, readFileSync as readFileSync7, rmSync as rmSync3, statSync as statSync3, writeFileSync as writeFileSync5 } from "node:fs";
+import { basename as basename2, resolve as resolve5 } from "node:path";
+import { randomBytes } from "node:crypto";
+
+// src/relay.ts
+import { chmodSync as chmodSync2, existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync6, renameSync as renameSync3, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join5 } from "node:path";
+function vendorOf(name) {
+  const n2 = (name ?? "").toLowerCase();
+  if (n2 === "claude" || n2 === "anthropic" || n2 === "claude-code") return "anthropic";
+  if (n2 === "openai" || n2 === "codex" || n2 === "chatgpt") return "openai";
+  return null;
+}
+var vendorLabel = (v) => v === "anthropic" ? "Claude" : "OpenAI";
+var kindOf = (v, value) => v === "anthropic" && value.startsWith("sk-ant-oat") ? "oauth_token" : "api_key";
+var modelsPath = (env) => join5(configDir(env), "models.json");
+function readSaved(env) {
+  try {
+    return JSON.parse(readFileSync6(modelsPath(env), "utf8"));
+  } catch {
+    return {};
+  }
+}
+function saveLocal(env, vendor, value) {
+  const all = readSaved(env);
+  if (value) all[vendor] = { kind: kindOf(vendor, value), value };
+  else delete all[vendor];
+  const dir = configDir(env);
+  mkdirSync4(dir, { recursive: true, mode: 448 });
+  const file = modelsPath(env);
+  const tmp = `${file}.${process.pid}.tmp`;
+  writeFileSync4(tmp, JSON.stringify(all, null, 2) + "\n", { mode: 384 });
+  chmodSync2(tmp, 384);
+  renameSync3(tmp, file);
+  chmodSync2(file, 384);
+}
+function hasSavedFile(env) {
+  return existsSync4(modelsPath(env));
+}
+function localAuth(env) {
+  const saved = readSaved(env);
+  const out = {};
+  if (env.CLAUDE_CODE_OAUTH_TOKEN) out.anthropic = { kind: "oauth_token", value: env.CLAUDE_CODE_OAUTH_TOKEN, from: "CLAUDE_CODE_OAUTH_TOKEN" };
+  else if (env.ANTHROPIC_API_KEY) out.anthropic = { kind: "api_key", value: env.ANTHROPIC_API_KEY, from: "ANTHROPIC_API_KEY" };
+  else if (saved.anthropic) out.anthropic = { ...saved.anthropic, from: "this laptop" };
+  if (env.OPENAI_API_KEY) out.openai = { kind: "api_key", value: env.OPENAI_API_KEY, from: "OPENAI_API_KEY" };
+  else if (saved.openai) out.openai = { ...saved.openai, from: "this laptop" };
+  return out;
+}
+function sign(vendor, auth, headers) {
+  if (vendor === "openai") {
+    headers.authorization = `Bearer ${auth.value}`;
+    return;
+  }
+  if (auth.kind === "oauth_token") {
+    delete headers["x-api-key"];
+    headers.authorization = `Bearer ${auth.value}`;
+    const beta = (headers["anthropic-beta"] ?? "").split(",").map((s2) => s2.trim()).filter(Boolean);
+    if (!beta.includes("oauth-2025-04-20")) beta.push("oauth-2025-04-20");
+    headers["anthropic-beta"] = beta.join(",");
+  } else {
+    delete headers.authorization;
+    headers["x-api-key"] = auth.value;
+  }
+}
+var UPSTREAM = { anthropic: "https://api.anthropic.com", openai: "https://api.openai.com" };
+function startRelay(o) {
+  const vendors = Object.keys(o.auth).filter((v) => o.auth[v]);
+  const inflight = /* @__PURE__ */ new Map();
+  let ws = null;
+  let stopped = false;
+  let signed = 0;
+  let attempt = 0;
+  let resolveDone;
+  const done = new Promise((r) => resolveDone = r);
+  const base = (v) => o.io.env[v === "anthropic" ? "AIRGATE_RELAY_ANTHROPIC_URL" : "AIRGATE_RELAY_OPENAI_URL"] || UPSTREAM[v];
+  const handle2 = async (sock, m) => {
+    const send = (f) => sock.readyState === 1 && sock.send(JSON.stringify(f));
+    const auth = o.auth[m.vendor];
+    if (!auth) return send({ t: "error", id: m.id, message: `this laptop has no ${vendorLabel(m.vendor)} sign-in` });
+    const headers = { ...m.headers };
+    sign(m.vendor, auth, headers);
+    const ctl = new AbortController();
+    inflight.set(m.id, ctl);
+    try {
+      const res = await o.fetch(`${base(m.vendor)}${m.path}`, {
+        method: m.method,
+        headers,
+        body: m.body ? Buffer.from(m.body, "base64") : void 0,
+        signal: ctl.signal
+      });
+      const out = {};
+      res.headers.forEach((v, k) => {
+        if (!["content-encoding", "content-length", "transfer-encoding", "connection", "keep-alive"].includes(k)) out[k] = v;
+      });
+      send({ t: "head", id: m.id, status: res.status, headers: out });
+      signed++;
+      if (res.body) for await (const chunk of res.body) send({ t: "data", id: m.id, b64: Buffer.from(chunk).toString("base64") });
+      send({ t: "end", id: m.id });
+    } catch (e) {
+      if (!ctl.signal.aborted) send({ t: "error", id: m.id, message: e instanceof Error ? e.message : String(e) });
+    } finally {
+      inflight.delete(m.id);
+    }
+  };
+  const connect = () => {
+    if (stopped) return;
+    const sock = o.io.websocket(o.url);
+    ws = sock;
+    sock.onopen = () => {
+      attempt = 0;
+      sock.send(JSON.stringify({ t: "hello", vendors, client: `airgate ${VERSION}` }));
+    };
+    sock.onmessage = (ev) => {
+      let m;
+      try {
+        m = JSON.parse(String(ev.data));
+      } catch {
+        return;
+      }
+      if (m.t === "req" && typeof m.id === "string") void handle2(sock, m);
+      else if (m.t === "cancel" && typeof m.id === "string") inflight.get(m.id)?.abort();
+    };
+    sock.onerror = () => void 0;
+    sock.onclose = (ev) => {
+      for (const c of inflight.values()) c.abort();
+      inflight.clear();
+      if (stopped) return resolveDone();
+      if (ev.code === 4401 || ev.code === 1008) {
+        o.say("the gateway refused this laptop (sign in again: airgate login)");
+        stopped = true;
+        return resolveDone();
+      }
+      attempt++;
+      setTimeout(connect, Math.min(15e3, 500 * 2 ** Math.min(attempt, 5)));
+    };
+  };
+  connect();
+  return {
+    vendors,
+    done,
+    count: () => signed,
+    stop() {
+      stopped = true;
+      try {
+        ws?.close(1e3, "done");
+      } catch {
+      }
+      resolveDone();
+    }
+  };
+}
+
+// src/commands/models.ts
+var HOW = {
+  anthropic: "a Claude subscription token (run `claude setup-token` and paste what it prints) or an Anthropic API key",
+  openai: "an OpenAI API key"
+};
+function relayIfSignedIn(ctx, say) {
+  const auth = localAuth(ctx.io.env);
+  if (!Object.keys(auth).length || !ctx.api.signedIn) return null;
+  try {
+    return startRelay({ io: ctx.io, url: ctx.api.relayUrl(), fetch: ctx.fetch, auth, say: say ?? (() => void 0) });
+  } catch {
+    return null;
+  }
+}
+var models = {
+  name: "models",
+  group: "account",
+  usage: "[connect|disconnect <claude|openai> [--laptop]]",
+  summary: "how pods' agents sign in to their model: in the pod, through this laptop, or connected to airgate",
+  example: "airgate models connect claude --laptop",
+  notes: [
+    "three ways, pick per your comfort: sign in inside the pod (nothing stored with airgate); this laptop signs (airgate relay: airgate holds nothing, works while the laptop is connected); or connect a sign-in to airgate (encrypted on the gateway, never sent to a pod).",
+    "connect <claude|openai>: saves it on airgate. with --laptop: saves it only on this laptop (~/.config/airgate/models.json), for airgate relay.",
+    "claude takes a subscription token (claude setup-token) or an API key; openai takes an API key. the value is read from a hidden prompt or stdin, never from the command line.",
+    "this laptop also uses CLAUDE_CODE_OAUTH_TOKEN, ANTHROPIC_API_KEY or OPENAI_API_KEY from its environment."
+  ],
+  flags: { laptop: { type: "boolean", help: "keep the sign-in on this laptop only (for airgate relay)" } },
+  async run(ctx) {
+    const { ui: ui2 } = ctx;
+    const [action, who, extra] = ctx.args.positionals;
+    if (extra) throw new UsageError(`unexpected "${extra}"`, "values are read from a hidden prompt or stdin, never from arguments");
+    const laptop = bool(ctx.args, "laptop");
+    if (action === "connect" || action === "disconnect") {
+      const vendor = vendorOf(who);
+      if (!vendor) throw new UsageError("which one? claude or openai", `airgate models ${action} claude`);
+      if (action === "disconnect") {
+        if (laptop) {
+          saveLocal(ctx.io.env, vendor, null);
+          if (ctx.json) return ui2.json({ ok: true, vendor, where: "laptop" });
+          return void ui2.out(`${vendorLabel(vendor)}: removed from this laptop.`);
+        }
+        const r2 = await ctx.api.disconnectModel(vendor);
+        if (ctx.json) return ui2.json({ ...r2, vendor, where: "airgate" });
+        return void ui2.out(r2.ok ? `${vendorLabel(vendor)}: disconnected from airgate. airgate no longer holds it.` : `${vendorLabel(vendor)} wasn't connected to airgate.`);
+      }
+      if (!ctx.json && ctx.io.stdin.isTTY) ui2.err(ui2.ce("dim", `paste ${HOW[vendor]}.`));
+      const value = (await readValue(ctx, vendor === "anthropic" ? "your Claude sign-in" : "your OpenAI key", `printf %s "$KEY" | airgate models connect ${who}${laptop ? " --laptop" : ""}`)).trim();
+      if (value.length < 20 || /\s/.test(value)) throw new CliError("that doesn't look like a key or token", HOW[vendor]);
+      if (laptop) {
+        saveLocal(ctx.io.env, vendor, value);
+        if (ctx.json) return ui2.json({ ok: true, vendor, kind: kindOf(vendor, value), where: "laptop" });
+        ui2.out(`${ui2.c("ok", "saved")} on this laptop only (${kindOf(vendor, value) === "oauth_token" ? "subscription token" : "API key"}). airgate doesn't get it.`);
+        return void ui2.out(ui2.c("dim", "pods use it while this laptop is connected: airgate relay (airgate run and airgate mcp do this on their own)."));
+      }
+      const r = await ctx.api.connectModel(vendor, value);
+      if (ctx.json) return ui2.json({ ...r, where: "airgate" });
+      ui2.out(`${ui2.c("ok", "connected")}: ${vendorLabel(vendor)} (${r.kind === "oauth_token" ? "subscription token" : "API key"}), kept encrypted on airgate and never sent to a pod.`);
+      return void ui2.out(ui2.c("dim", `every pod's ${vendor === "anthropic" ? "Claude Code" : "Codex"} can use it now, unless signed in inside the pod. undo: airgate models disconnect ${who}`));
+    }
+    if (action) throw new UsageError(`unknown "${action}"`, "airgate models \xB7 airgate models connect claude [--laptop] \xB7 airgate models disconnect claude [--laptop]");
+    const st = await ctx.api.modelsAuth();
+    const local = localAuth(ctx.io.env);
+    if (ctx.json) return ui2.json({ ...st, thisLaptop: Object.fromEntries(Object.entries(local).map(([v, a]) => [v, { kind: a.kind, from: a.from }])) });
+    const rows2 = ["anthropic", "openai"].map((v) => {
+      const c = st.connected.find((x) => x.vendor === v);
+      const l = local[v];
+      return [
+        vendorLabel(v),
+        c ? ui2.c("ok", `connected to airgate (${c.kind === "oauth_token" ? "subscription" : "API key"})`) : ui2.c("dim", "not on airgate"),
+        l ? `this laptop: ${l.from}${st.laptop.connected && st.laptop.vendors.includes(v) ? ui2.c("ok", " \xB7 relaying") : ""}` : ui2.c("dim", "not on this laptop")
+      ];
+    });
+    ui2.table(rows2, { head: ["model", "airgate", "laptop"] });
+    ui2.out();
+    ui2.out(ui2.c("dim", "a pod uses, in order: a sign-in made inside it \xB7 a connected laptop (airgate relay) \xB7 one connected to airgate."));
+    if (!st.connected.length && !Object.keys(local).length) ui2.out(ui2.c("dim", "set one up: airgate models connect claude --laptop (airgate holds nothing) or airgate models connect claude."));
+    if (!hasSavedFile(ctx.io.env) && Object.keys(local).length) ui2.out(ui2.c("dim", "this laptop signs from its environment variables."));
+  }
+};
+var relay = {
+  name: "relay",
+  group: "account",
+  usage: "",
+  summary: "sign your pods' model calls from this laptop while it runs: airgate never holds your sign-in",
+  example: "airgate relay",
+  notes: [
+    "uses this laptop's Claude / OpenAI sign-in (see airgate models). only pods with no sign-in of their own use it, and only while this runs.",
+    "airgate run and airgate mcp start it on their own when this laptop has a sign-in."
+  ],
+  async run(ctx) {
+    const { ui: ui2 } = ctx;
+    const auth = localAuth(ctx.io.env);
+    if (!Object.keys(auth).length) throw new CliError("no model sign-in on this laptop", "airgate models connect claude --laptop (or set CLAUDE_CODE_OAUTH_TOKEN / ANTHROPIC_API_KEY / OPENAI_API_KEY)");
+    const r = startRelay({ io: ctx.io, url: ctx.api.relayUrl(), fetch: ctx.fetch, auth, say: (l) => ui2.err(ui2.ce("warn", l)) });
+    const stop = () => r.stop();
+    ctx.io.signals.on("SIGINT", stop);
+    ctx.io.signal?.addEventListener("abort", stop);
+    if (!ctx.json) {
+      ui2.out(`relaying ${r.vendors.map(vendorLabel).join(" and ")} for your pods from this laptop. ${ui2.c("dim", "ctrl-c to stop.")}`);
+      for (const v of r.vendors) ui2.out(ui2.c("dim", `  ${vendorLabel(v)}: ${auth[v].from}`));
+    }
+    try {
+      await r.done;
+    } finally {
+      ctx.io.signals.off("SIGINT", stop);
+      ctx.io.signal?.removeEventListener("abort", stop);
+    }
+    if (ctx.json) return ui2.json({ signed: r.count() });
+    ui2.out(`stopped. ${r.count()} model call(s) signed.`);
+  }
+};
+
+// src/commands/run.ts
+var MODEL = {
+  "claude-code": { vendor: "anthropic", secrets: ["CLAUDE_CODE_OAUTH_TOKEN", "ANTHROPIC_API_KEY"] },
+  codex: { vendor: "openai", secrets: ["OPENAI_API_KEY"] }
+};
+var shortId = () => randomBytes(2).toString("hex");
+var runName = (base) => `${base.slice(0, 52)}-run-${shortId()}`;
+async function signInWarning(ctx, agent, relaying) {
+  const m = MODEL[agent];
+  if (!m || relaying.includes(m.vendor)) return null;
+  const st = await ctx.api.modelsAuth().catch(() => null);
+  if (st?.connected.some((c) => c.vendor === m.vendor)) return null;
+  const list2 = await ctx.api.secrets().catch(() => null);
+  if (list2?.account.some((s2) => m.secrets.includes(s2.name))) return null;
+  if (!st && !list2) return null;
+  const who = m.vendor === "anthropic" ? "claude" : "openai";
+  return `${AGENTS[agent].label} has no sign-in for a fresh pod. pick one: airgate models connect ${who} --laptop (this laptop signs; airgate holds nothing), or airgate models connect ${who} (kept on airgate)`;
+}
+async function finish(ctx, pod, keep) {
+  if (keep === "destroy") await ctx.ui.spin(`deleting ${pod.spec.name}`, ctx.api.destroy(pod.id));
+  else if (keep === "sleep") await ctx.ui.spin(`putting ${pod.spec.name} to sleep`, ctx.api.stop(pod.id)).catch(() => void 0);
+}
+var runTask = {
+  name: "run",
+  group: "up \xB7 down",
+  usage: '"<task>" [dir] [--repo owner/name] [--agent a] [--env [.env]] [--keep] [--no-apply] [--pr] [--timeout min]',
+  summary: "one task in a fresh pod: send the project, run it, bring the changes back, delete the pod",
+  example: 'airgate run "get the failing tests passing"',
+  notes: [
+    "this folder (default): launches a pod, sends the project like `airgate up` (no conversation), hands the pod's agent the task, waits, applies the result here like `airgate down`, then deletes the pod.",
+    "--no-apply prints the patch instead of applying it (the pod sleeps, so `airgate down --pod <it>` can still apply it); --keep keeps the pod (asleep).",
+    "--repo owner/name (or a github link): runs on the repo itself instead (private repos need GitHub connected: airgate github connect). the work stays on a branch in the pod; --pr asks the agent to open a pull request, which waits in your airlock. the pod sleeps afterwards (free).",
+    "if the task fails, the patch does not apply, or it runs past --timeout (default 60 minutes), the pod is kept so nothing is lost.",
+    "the pod's agent needs a model sign-in: while run runs, this laptop signs for it if it has one (airgate models connect claude --laptop); or connect one to airgate (airgate models connect claude). see: airgate help models"
+  ],
+  flags: {
+    repo: { type: "string", value: "owner/name", help: "run on a GitHub repo instead of this folder" },
+    agent: { type: "string", value: "agent", choices: Object.keys(AGENTS), help: "the pod's agent (default claude-code)" },
+    memory: { type: "string", value: "size", choices: Object.keys(SIZES), help: "pod size (default standard)" },
+    env: { type: "string", value: "file", implicit: ".env", help: "send a dotenv file's keys as the pod's secrets (default .env)" },
+    keep: { type: "boolean", help: "keep the pod afterwards (asleep) instead of deleting it" },
+    "no-apply": { type: "boolean", help: "print the patch, change nothing here (the pod is kept, asleep)" },
+    pr: { type: "boolean", help: "with --repo: have the agent open a pull request (it waits in your airlock)" },
+    timeout: { type: "string", value: "minutes", default: "60", help: "stop waiting after this long (the pod keeps working)" },
+    yes: { type: "boolean", short: "y", help: "don't ask" }
+  },
+  async run(ctx) {
+    const { ui: ui2 } = ctx;
+    const [task2, dirArg, extra] = ctx.args.positionals;
+    if (!task2?.trim()) throw new UsageError("what should the agent do?", 'airgate run "get the failing tests passing"');
+    if (extra) throw new UsageError(`unexpected "${extra}" (put the task in quotes)`);
+    if (task2.length > 3500) throw new UsageError("the task is 3500 characters at most");
+    const agent = str(ctx.args, "agent") ?? "claude-code";
+    const size2 = str(ctx.args, "memory") ?? "standard";
+    const minutes = Number(str(ctx.args, "timeout") ?? "60");
+    if (!Number.isFinite(minutes) || minutes <= 0) throw new UsageError("--timeout: minutes, e.g. 30");
+    const repo = str(ctx.args, "repo");
+    const warnings = [];
+    const relayer = relayIfSignedIn(ctx);
+    if (relayer && !ctx.json) ui2.err(ui2.ce("dim", `this laptop signs the pod's ${relayer.vendors.map(vendorLabel).join(" / ")} calls while it runs (airgate holds nothing)`));
+    const warn = await signInWarning(ctx, agent, relayer?.vendors ?? []);
+    if (warn) {
+      warnings.push(warn);
+      if (!ctx.json) ui2.err(ui2.ce("warn", warn));
+    }
+    try {
+      return await go();
+    } finally {
+      relayer?.stop();
+    }
+    async function go() {
+      const work = async (pod2, text3) => {
+        let r2 = await ui2.spin(`handing ${pod2.spec.name} the task`, ctx.api.startTask(pod2.id, text3));
+        r2 = await ui2.spin(`${pod2.spec.name} is working (${AGENTS[agent].label})`, () => waitRun(ctx, pod2.id, r2, minutes * 6e4));
+        const log2 = await ctx.api.runLog(pod2.id, r2.id).catch(() => "");
+        return { run: r2, log: log2, done: r2.endedAt !== void 0, ok: r2.endedAt !== void 0 && r2.exitCode === 0 };
+      };
+      if (repo) {
+        if (dirArg) throw new UsageError("a folder or --repo, not both");
+        const look = await ctx.api.inspectRepo(repo).catch((e) => {
+          if (e instanceof ApiError && e.status === 404) return null;
+          throw e;
+        });
+        if (look && !look.reachable) {
+          const gh = await ctx.api.github().catch(() => null);
+          if (gh && !gh.configured) throw new CliError(`${look.repo} is private, and private repos need the Airgate GitHub App, which isn't set up on this gateway yet`, 'run it from a local clone instead: cd into it, then airgate run "\u2026"');
+          throw new CliError(`airgate can't reach ${look.repo} (private, and not shared with Airgate)`, "connect GitHub and install the app on it: airgate github connect");
+        }
+        const name2 = runName((look?.repo ?? repo).split("/").pop() ?? "repo");
+        const spec = { name: name2, agent, size: size2, repo: look?.repo ?? repo, masking: true, network: "allowlist", allow: DEFAULT_ALLOW, autoStopMinutes: null, autoCheckpoint: true };
+        const pod2 = await ui2.spin(`launching ${name2} on ${spec.repo}`, async () => waitReady(ctx, await ctx.api.launch(spec)));
+        const envFile2 = str(ctx.args, "env");
+        if (envFile2) await ui2.spin(`sending ${envFile2} as secrets`, sendDotenv(ctx, envFile2, pod2.id));
+        const text3 = task2 + (bool(ctx.args, "pr") ? '\n\nWhen you are done: commit on a new branch and open a pull request with `airgate pr --title "\u2026"` (it waits for my approval).' : "\n\nWhen you are done: commit your work on a new branch here and say which branch.");
+        const r2 = await work(pod2, text3);
+        await finish(ctx, pod2, r2.done ? "sleep" : "running");
+        if (ctx.json) return ui2.json({ pod: { id: pod2.id, name: name2 }, repo: spec.repo, run: r2.run, ok: r2.ok, log: r2.log, pod_state: r2.done ? "sleeping" : "running", warnings });
+        ctx.io.stdout.write(r2.log.endsWith("\n") || !r2.log ? r2.log : r2.log + "\n");
+        if (!r2.done) ui2.err(ui2.ce("warn", `still working after ${minutes} min; it carries on. follow it: airgate log ${name2}`));
+        ui2.out(`${r2.ok ? ui2.c("ok", "done") : ui2.c("bad", "failed")} on ${name2}${r2.done ? " (asleep now, free)" : ""}. look: airgate attach ${name2}${bool(ctx.args, "pr") ? " \xB7 the pull request: airgate airlock" : ""}`);
+        return r2.ok ? 0 : 1;
+      }
+      const projectDir = resolve5(ctx.io.cwd, dirArg ?? ".");
+      if (!existsSync5(projectDir) || !statSync3(projectDir).isDirectory()) throw new CliError(`no directory ${projectDir}`);
+      const noApply = bool(ctx.args, "no-apply");
+      if (!noApply && !gitTopLevel(projectDir)) {
+        throw new CliError(`${projectDir} isn't a git repo, so the result can't come back as a patch`, "git init && git add -A && git commit -m base, or use --no-apply");
+      }
+      const sp = statePath(projectDir);
+      const before = existsSync5(sp) ? readFileSync7(sp, "utf8") : null;
+      const restoreState = () => {
+        try {
+          if (before !== null) writeFileSync5(sp, before);
+          else rmSync3(sp, { force: true });
+        } catch {
+        }
+      };
+      const name = runName(podDirName(projectDir));
+      const upArgv = [projectDir, "--name", name, "--agent", agent, "--memory", size2, "--no-session", "--yes"];
+      const envFile = str(ctx.args, "env");
+      if (envFile) upArgv.push("--env", envFile);
+      const sent = await ui2.spin(`sending ${basename2(projectDir)} to a fresh pod`, runCommand(ctx, up, upArgv, ctx.io.cwd));
+      const pod = sent.pod;
+      const text2 = `Work in ~/${sent.dir} (a project sent from my laptop). ${task2}
+
+When you are done, leave your changes in the files there (no need to commit or push): they are brought back to my laptop as a patch.`;
+      let r;
+      try {
+        r = await work(pod, text2);
+      } catch (e) {
+        await finish(ctx, pod, "sleep");
+        throw e;
+      }
+      const keepNote = (why) => `${why}. the pod is kept (asleep): airgate attach ${name} \xB7 bring it back: airgate down --pod ${name} \xB7 delete it: airgate destroy ${name}`;
+      const out = (o) => ui2.json({ pod: { id: pod.id, name }, run: r.run, ok: r.ok, log: r.log, warnings, ...o });
+      if (!r.ok) {
+        await finish(ctx, pod, r.done ? "sleep" : "running");
+        if (ctx.json) return out({ applied: false, pod_state: r.done ? "sleeping" : "running" });
+        ctx.io.stdout.write(r.log.endsWith("\n") || !r.log ? r.log : r.log + "\n");
+        ui2.err(ui2.ce("bad", r.done ? keepNote(`the task failed (exit ${r.run.exitCode ?? "?"})`) : `still working after ${minutes} min; it carries on. follow it: airgate log ${name}, then: airgate down --pod ${name}`));
+        return 1;
+      }
+      let result;
+      try {
+        result = await ui2.spin(`bringing the changes back from ${name}`, runCommand(ctx, down2, ["--pod", name, "--no-session", ...noApply ? ["--dry-run"] : ["--yes"]], projectDir));
+      } catch (e) {
+        await finish(ctx, pod, "sleep");
+        const why = e instanceof Error ? e.message.split("\n")[0] : String(e);
+        if (ctx.json) return out({ applied: false, error: why, pod_state: "sleeping" });
+        ctx.io.stdout.write(r.log.endsWith("\n") || !r.log ? r.log : r.log + "\n");
+        ui2.err(ui2.ce("bad", keepNote(`the task finished, but its changes didn't come back: ${why}`)));
+        return 1;
+      }
+      const files = result.files ?? [];
+      const keep = noApply || bool(ctx.args, "keep");
+      await finish(ctx, pod, keep ? "sleep" : "destroy");
+      if (!keep) restoreState();
+      if (ctx.json) return out({ applied: !noApply && files.length > 0, files, ...noApply ? { patch: result.patch ?? "" } : {}, pod_state: keep ? "sleeping" : "deleted" });
+      ctx.io.stdout.write(r.log.endsWith("\n") || !r.log ? r.log : r.log + "\n");
+      if (noApply) {
+        ctx.io.stdout.write(result.patch ?? "");
+        ui2.err(`${files.length} file(s) changed, not applied. apply: airgate down --pod ${name} \xB7 delete the pod: airgate destroy ${name}`);
+        return 0;
+      }
+      const risky = files.filter((f) => f.risky).length;
+      ui2.out(
+        `${ui2.c("ok", "done")}: ${files.length ? `${files.length} file(s) changed here${risky ? `, ${risky} risky` : ""}. review: git status \xB7 git diff` : "no changes came back"}` + (keep ? ` \xB7 the pod is kept (asleep): ${name}` : " \xB7 the pod is deleted")
+      );
+      return 0;
+    }
+  }
+};
+
+// src/commands/mcp.ts
+var PROTOCOL_VERSION = "2025-06-18";
+var obj = (properties, required = []) => ({ type: "object", properties, required, additionalProperties: false });
+var s = (description, extra = {}) => ({ type: "string", description, ...extra });
+var b = (description) => ({ type: "boolean", description });
+var POD = s("pod name or id (a unique prefix is enough)");
+var need = (args, key) => {
+  const v = args[key];
+  if (typeof v !== "string" || !v.trim()) throw new UsageError(`${key} is required`);
+  return v;
+};
+var jobSchema = obj(
   {
     id: s("keep an existing job: its id"),
     name: s("a name to show"),
@@ -8540,6 +9114,9 @@ var jobSchema = obj(
   },
   ["cron", "task"]
 );
+var OWN = /* @__PURE__ */ new Map();
+var n = (description) => ({ type: "number", description });
+var dirOf = (ctx, a) => typeof a.dir === "string" && a.dir ? a.dir : ctx.io.cwd;
 var TOOLS = [
   {
     name: "pods_list",
@@ -8589,6 +9166,7 @@ var TOOLS = [
       }
       const spec = specFromFlags({ ...ctx, args: parseArgs(argv, launch.flags ?? {}) });
       const pod = await waitReady(ctx, await ctx.api.launch(spec));
+      OWN.set(pod.id, "launch");
       return { name: pod.spec.name, id: pod.id, state: pod.state, readyMs: pod.readyMs, spec: pod.spec };
     }
   },
@@ -8709,6 +9287,119 @@ var TOOLS = [
       if (typeof a.pod === "string" && a.pod) argv.push("--pod", a.pod);
       return runCommand(ctx, down2, argv, typeof a.dir === "string" && a.dir ? a.dir : ctx.io.cwd);
     }
+  },
+  {
+    name: "pod_run",
+    description: "One task in a fresh pod, start to finish: sends the local project (like pod_up, without the conversation), the pod's agent does the task, the changes come back into the local repo as a patch (pod_down's checks), and the pod is deleted. With repo: runs on a GitHub repo instead (private ones need GitHub connected); the work stays on a branch (or a PR with pr, which waits in the airlock) and the pod sleeps. On failure the pod is kept, asleep. Can take many minutes: for long work prefer pod_up or pod_launch + task_start and check back with run_status.",
+    inputSchema: obj(
+      {
+        task: s("what the agent should do"),
+        dir: s("the local project directory (default: where the server started)"),
+        repo: s("run on this GitHub repo (owner/name) instead of the local project"),
+        agent: s("claude-code | codex | opencode | pi (default claude-code)"),
+        apply: b("false: return the patch without applying it (the pod is kept, asleep)"),
+        keep: b("keep the pod afterwards (asleep) instead of deleting it"),
+        pr: b("with repo: open a pull request at the end (it waits in the airlock)"),
+        env: s("a dotenv file whose keys become the pod's secrets, e.g. .env"),
+        timeoutMinutes: n("stop waiting after this many minutes (default 60); the pod keeps working")
+      },
+      ["task"]
+    ),
+    async call(ctx, a) {
+      const argv = [need(a, "task")];
+      const opt = (flag, v) => typeof v === "string" && v && argv.push(`--${flag}`, v);
+      opt("repo", a.repo);
+      opt("agent", a.agent);
+      opt("env", a.env);
+      if (a.apply === false) argv.push("--no-apply");
+      if (a.keep === true) argv.push("--keep");
+      if (a.pr === true) argv.push("--pr");
+      if (typeof a.timeoutMinutes === "number") argv.push("--timeout", String(a.timeoutMinutes));
+      const out = await runCommand(ctx, runTask, argv, dirOf(ctx, a));
+      if (out.pod?.id && out.pod_state !== "deleted") OWN.set(out.pod.id, a.repo ? "launch" : "project");
+      return out;
+    }
+  },
+  {
+    name: "pod_up",
+    description: "Move the local project into a pod: its files (git-tracked and untracked-but-not-ignored), and by default the latest Claude Code / Codex conversation here, which resumes in the pod. Launches a new pod named after the folder unless pod is given. Bring the work back later with pod_diff / pod_down.",
+    inputSchema: obj({
+      dir: s("the local project directory (default: where the server started)"),
+      pod: s("send into this existing pod instead of launching one"),
+      name: s("name for a new pod"),
+      agent: s("agent for a new pod: claude-code | codex | opencode | pi"),
+      env: s("a dotenv file whose keys become the pod's secrets, e.g. .env"),
+      conversation: b("false: don't send the agent conversation")
+    }),
+    async call(ctx, a) {
+      const argv = ["--yes"];
+      const opt = (flag, v) => typeof v === "string" && v && argv.push(`--${flag}`, v);
+      opt("pod", a.pod);
+      opt("name", a.name);
+      opt("agent", a.agent);
+      opt("env", a.env);
+      if (a.conversation === false) argv.push("--no-session");
+      const out = await runCommand(ctx, up, argv, dirOf(ctx, a));
+      if (!a.pod && out.pod?.id) OWN.set(out.pod.id, "project");
+      return out;
+    }
+  },
+  {
+    name: "pod_sleep",
+    description: "Put a pod to sleep: it stops, keeps its files and checkpoints, and costs nothing until woken. Do this when you are done with a pod you launched.",
+    inputSchema: obj({ pod: POD }, ["pod"]),
+    async call(ctx, a) {
+      const p = await resolvePod(ctx, need(a, "pod"));
+      return ctx.api.stop(p.id);
+    }
+  },
+  {
+    name: "pod_wake",
+    description: "Wake a sleeping pod (seconds).",
+    inputSchema: obj({ pod: POD }, ["pod"]),
+    async call(ctx, a) {
+      const p = await resolvePod(ctx, need(a, "pod"));
+      return ctx.api.resume(p.id);
+    }
+  },
+  {
+    name: "pod_destroy",
+    description: "Delete a pod for good (its files and checkpoints). Allowed on your own for pods you launched in this session (pod_launch, pod_up, pod_run) once their work is safe: a pod holding a local project refuses while it has changes not brought back (pod_down first, or discard_changes); for a pod_launch pod, make sure its work is pushed or not needed. Any other pod: only when the user explicitly asked to delete that pod; then set user_confirmed.",
+    inputSchema: obj({ pod: POD, user_confirmed: b("the user explicitly asked to delete this pod"), discard_changes: b("delete even though it has changes not brought back") }, ["pod"]),
+    async call(ctx, a) {
+      const p = await resolvePod(ctx, need(a, "pod"));
+      if (!OWN.has(p.id) && a.user_confirmed !== true) {
+        throw new CliError(`${p.spec.name} wasn't launched by you in this session: ask the user before deleting it, then call again with user_confirmed`);
+      }
+      if (a.discard_changes !== true && (OWN.get(p.id) ?? "project") === "project") {
+        const pending = await ctx.api.diff(p.id, "up").catch(() => null);
+        if (pending && pending.files.length) throw new CliError(`${p.spec.name} has ${pending.files.length} changed file(s) not brought back: pod_down first, or set discard_changes if the user doesn't want them`);
+      }
+      await ctx.api.destroy(p.id);
+      OWN.delete(p.id);
+      return { deleted: p.spec.name, id: p.id };
+    }
+  },
+  {
+    name: "pod_ports",
+    description: "What is listening in a pod (dev servers on ports 1024+) and its preview links.",
+    inputSchema: obj({ pod: POD }, ["pod"]),
+    async call(ctx, a) {
+      const p = await resolvePod(ctx, need(a, "pod"));
+      return ctx.api.previews(p.id);
+    }
+  },
+  {
+    name: "pod_preview",
+    description: "A link to a port in a pod, for the user to open: private (signed in as them) by default; public makes a link anyone can open (tell the user it is public).",
+    inputSchema: obj({ pod: POD, port: n("the port, 1024+"), public: b("a public link anyone can open") }, ["pod", "port"]),
+    async call(ctx, a) {
+      const p = await resolvePod(ctx, need(a, "pod"));
+      const port = Number(a.port);
+      if (!Number.isInteger(port) || port < 1024 || port > 65535) throw new UsageError("port: 1024\u201365535");
+      const pv = await ctx.api.ensurePreview(p.id, { port, public: a.public === true });
+      return pv.public ? { url: pv.url, public: true } : { url: await ctx.api.openPreview(pv.slug, "/"), public: false, note: "a private link: it signs the user in; give it to them, not to anyone else" };
+    }
   }
 ];
 function errorText(e) {
@@ -8732,7 +9423,7 @@ async function handle(ctx, msg) {
         protocolVersion: asked,
         capabilities: { tools: { listChanged: false } },
         serverInfo: { name: "airgate", title: "Airgate", version: VERSION },
-        instructions: "Airgate pods are private cloud computers for coding agents. Use pods_list first; task_start hands a pod a task and run_status/run_log follow it. Outbound actions wait in the airlock for the user: never approve on your own initiative."
+        instructions: "Airgate pods are private cloud computers for coding agents. pod_run does one task in a fresh pod and brings the result back; pod_up / pod_down move the local project and conversation there and back; task_start hands an existing pod a task (run_status / run_log follow it). Sleep pods you are done with; delete only pods you launched (or the user asked). Outbound actions wait in the airlock for the user: never approve on your own initiative."
       });
     }
     case "ping":
@@ -8774,6 +9465,10 @@ var mcp = {
     const rl = createInterface({ input: ctx.io.stdin, crlfDelay: Infinity, terminal: false });
     const pending = /* @__PURE__ */ new Set();
     if (!ctx.api.signedIn) ctx.io.stderr.write("airgate mcp: not signed in; tools will say so. run: airgate login\n");
+    const relayer = relayIfSignedIn(ctx, (l) => ctx.io.stderr.write(`airgate mcp: ${l}
+`));
+    if (relayer) ctx.io.stderr.write(`airgate mcp: signing pods' ${relayer.vendors.join(" / ")} calls from this laptop while this runs
+`);
     for await (const line2 of rl) {
       if (!line2.trim()) continue;
       let msg;
@@ -8791,10 +9486,14 @@ var mcp = {
       void job2.finally(() => pending.delete(job2));
     }
     await Promise.all(pending);
+    relayer?.stop();
   }
 };
 
 // src/commands/misc.ts
+import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync6 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+import { join as join6 } from "node:path";
 var PAGES = ["pods", "airlock", "usage", "settings", "mask", "chat", "notes", "data", "status"];
 var open = {
   name: "open",
@@ -8853,6 +9552,106 @@ var version = {
     ctx.ui.out(`airgate ${VERSION}`);
   }
 };
+var skill = {
+  name: "skill",
+  group: "other",
+  usage: "[install [--project] | show]",
+  summary: "teach Claude Code airgate: install the airgate skill (~/.claude/skills, or this project with --project)",
+  example: "airgate skill install",
+  public: true,
+  flags: { project: { type: "boolean", help: "install into ./.claude/skills (shared with the project) instead of ~/.claude/skills" } },
+  async run(ctx) {
+    const action = ctx.args.positionals[0] ?? "show";
+    const url = `${ctx.cfg.app}/skills/airgate/SKILL.md`;
+    const res = await ctx.ui.spin("fetching the airgate skill", ctx.fetch(url));
+    if (!res.ok) throw new CliError(`couldn't fetch ${url} (${res.status})`);
+    const text2 = await res.text();
+    if (!text2.startsWith("---")) throw new CliError(`${url} isn't a skill file`);
+    if (action === "show") return void ctx.io.stdout.write(text2);
+    if (action !== "install") throw new UsageError(`unknown action "${action}"`, "airgate skill install [--project] | airgate skill show");
+    const base = bool(ctx.args, "project") ? join6(ctx.io.cwd, ".claude") : join6(ctx.io.env.HOME ?? homedir3(), ".claude");
+    const dir = join6(base, "skills", "airgate");
+    mkdirSync5(dir, { recursive: true });
+    writeFileSync6(join6(dir, "SKILL.md"), text2);
+    if (ctx.json) return ctx.ui.json({ installed: join6(dir, "SKILL.md") });
+    ctx.ui.out(`${ctx.ui.c("ok", "installed")} the airgate skill: ${join6(dir, "SKILL.md")}`);
+    ctx.ui.out(ctx.ui.c("dim", 'claude code picks it up in its next session. ask it to "move this to an airgate pod".'));
+  }
+};
+
+// src/commands/previews.ts
+var portArg = (v) => {
+  const n2 = Number(v);
+  if (!v || !Number.isInteger(n2) || n2 < 1 || n2 > 65535) throw new UsageError("a port, like 3000");
+  return n2;
+};
+async function podAndPort(ctx) {
+  const [ref, port] = ctx.args.positionals;
+  if (!ref) throw new UsageError("which pod?");
+  return { pod: await resolvePod(ctx, ref), port: portArg(port) };
+}
+var ports = {
+  name: "ports",
+  aliases: ["previews"],
+  group: "pods",
+  usage: "<pod>",
+  summary: "what's listening in a pod, and its preview links",
+  example: "airgate ports web",
+  async run(ctx) {
+    const ref = ctx.args.positionals[0];
+    if (!ref) throw new UsageError("which pod? airgate ports <pod>");
+    const pod = await resolvePod(ctx, ref);
+    const r = await ctx.api.previews(pod.id);
+    if (ctx.json) return ctx.ui.json(r);
+    if (!r.enabled) return void ctx.ui.out("previews are not set up on this gateway.");
+    const byPort = new Map(r.previews.map((p) => [p.port, p]));
+    const all = [.../* @__PURE__ */ new Set([...r.ports, ...r.previews.map((p) => p.port)])].sort((a, b2) => a - b2);
+    if (!all.length) return void ctx.ui.out(`nothing listening in ${pod.spec.name} yet. start a dev server (any port 1024+), then: airgate preview ${pod.spec.name} <port>`);
+    ctx.ui.table(
+      all.map((port) => {
+        const p = byPort.get(port);
+        return [`:${port}`, r.ports.includes(port) ? ctx.ui.c("ok", "listening") : ctx.ui.c("dim", "not listening"), p ? p.public ? ctx.ui.c("warn", "public") : "private" : ctx.ui.c("dim", "-"), p?.public ? p.url : ""];
+      }),
+      { head: ["port", "", "preview", "link"] }
+    );
+    ctx.ui.out(ctx.ui.c("dim", `open one: airgate preview ${pod.spec.name} <port> \xB7 share it: airgate share ${pod.spec.name} <port>`));
+  }
+};
+var preview = {
+  name: "preview",
+  group: "pods",
+  usage: "<pod> <port> [/path] [--no-open]",
+  summary: "open a port of a pod in your browser (private to you)",
+  example: "airgate preview web 3000",
+  flags: { "no-open": { type: "boolean", help: "print the link instead (it signs you in, once, within a minute)" } },
+  async run(ctx) {
+    const { pod, port } = await podAndPort(ctx);
+    const path = ctx.args.positionals[2] ?? "/";
+    const p = await ctx.api.ensurePreview(pod.id, { port });
+    const url = await ctx.api.openPreview(p.slug, path.startsWith("/") ? path : `/${path}`);
+    if (ctx.json) return ctx.ui.json({ preview: p, open: url });
+    await openOrPrint(ctx, url, `${pod.spec.name}:${port}`);
+  }
+};
+var share = {
+  name: "share",
+  group: "pods",
+  usage: "<pod> <port> [--off]",
+  summary: "a public link to a port of a pod (anyone with it can open it); --off makes it private again",
+  example: "airgate share web 3000",
+  flags: { off: { type: "boolean", help: "stop sharing: private to you again" } },
+  async run(ctx) {
+    const { pod, port } = await podAndPort(ctx);
+    const off = bool(ctx.args, "off");
+    const p = await ctx.api.ensurePreview(pod.id, { port, public: !off });
+    if (ctx.json) return ctx.ui.json(p);
+    if (off) ctx.ui.out(`${pod.spec.name}:${port} is private again: only you can open it (airgate preview ${pod.spec.name} ${port}).`);
+    else {
+      ctx.ui.out(p.url);
+      ctx.ui.err(ctx.ui.ce("warn", `public: anyone with this link reaches ${pod.spec.name}:${port}. stop with: airgate share ${pod.spec.name} ${port} --off`));
+    }
+  }
+};
 
 // src/commands/undo.ts
 var newestFirst = (cps) => [...cps].sort((a, b2) => b2.at - a.at);
@@ -9033,15 +9832,15 @@ var Canvas = class {
   /** write text at (x, y), clipped to maxWidth and the canvas; returns columns written */
   text(x, y, s2, st = {}, maxWidth = Infinity) {
     if (y < 0 || y >= this.rows) return 0;
-    let n = 0;
+    let n2 = 0;
     for (const ch of s2.replace(/[\u0000-\u001f\u007f]/g, " ")) {
-      if (n >= maxWidth) break;
-      const cx = x + n;
+      if (n2 >= maxWidth) break;
+      const cx = x + n2;
       if (cx >= this.cols) break;
       if (cx >= 0) this.cells[y][cx] = { ch, st };
-      n++;
+      n2++;
     }
-    return n;
+    return n2;
   }
   fill(x, y, w, h, st = {}) {
     for (let r = y; r < y + h; r++) for (let c = x; c < x + w; c++) if (r >= 0 && r < this.rows && c >= 0 && c < this.cols) this.cells[r][c] = { ch: " ", st };
@@ -9246,7 +10045,7 @@ function formKey(s2, form, key) {
     }
     return { state: { ...s2, modal: { kind: "form", form: next } }, effects: [] };
   };
-  const cycle2 = (n, len, d2) => (n + d2 + len) % len;
+  const cycle2 = (n2, len, d2) => (n2 + d2 + len) % len;
   switch (key) {
     case "tab":
     case "down":
@@ -9338,10 +10137,10 @@ function modalKey(s2, m, key) {
       return none;
     }
     case "timeline": {
-      const n = m.checkpoints?.length ?? 0;
+      const n2 = m.checkpoints?.length ?? 0;
       if (key === "esc" || key === "q" || key === "u") return close;
-      if ((key === "down" || key === "j") && n) return { state: { ...s2, modal: { ...m, sel: Math.min(n - 1, m.sel + 1) } }, effects: [] };
-      if ((key === "up" || key === "k") && n) return { state: { ...s2, modal: { ...m, sel: Math.max(0, m.sel - 1) } }, effects: [] };
+      if ((key === "down" || key === "j") && n2) return { state: { ...s2, modal: { ...m, sel: Math.min(n2 - 1, m.sel + 1) } }, effects: [] };
+      if ((key === "up" || key === "k") && n2) return { state: { ...s2, modal: { ...m, sel: Math.max(0, m.sel - 1) } }, effects: [] };
       const cp = m.checkpoints?.[m.sel];
       if (key === "enter" && cp) {
         return {
@@ -9649,16 +10448,16 @@ function draw(s2, cols, rows2) {
 }
 function header(c, s2) {
   let x = c.text(0, 0, " \u22A0 airgate", { bold: true }) + 2;
-  const n = pendingApprovals(s2).length;
+  const n2 = pendingApprovals(s2).length;
   const tabs = [
     ["pods", "pods"],
-    ["airlock", n ? `airlock [${n}]` : "airlock"],
+    ["airlock", n2 ? `airlock [${n2}]` : "airlock"],
     ["usage", "usage"]
   ];
   for (const [id, label2] of tabs) {
     if (x + label2.length + 2 > c.cols) break;
     const active = s2.screen === id;
-    x += c.text(x, 0, ` ${label2} `, { inverse: active, bold: active, fg: id === "airlock" && n && !active ? "warn" : void 0 });
+    x += c.text(x, 0, ` ${label2} `, { inverse: active, bold: active, fg: id === "airlock" && n2 && !active ? "warn" : void 0 });
     x += 1;
   }
   const right = s2.connected ? "\u25CF live" : s2.loaded ? "\u25CB offline" : "\u25CB connecting";
@@ -9704,9 +10503,9 @@ function splash(c, s2) {
 }
 function statusLine(c, s2) {
   const y = c.rows - 1;
-  const n = pendingApprovals(s2).length;
+  const n2 = pendingApprovals(s2).length;
   const parts = [];
-  if (n) parts.push(`airlock [${n}]`);
+  if (n2) parts.push(`airlock [${n2}]`);
   if (s2.me) parts.push(s2.me.plan === "none" ? "no plan" : s2.me.plan, `${hrs(s2.me.usedHours)} this month`);
   const right = parts.join(" \xB7 ");
   let left;
@@ -9725,8 +10524,8 @@ function statusLine(c, s2) {
   c.text(0, y, " " + clip(left, Math.max(0, c.cols - rw - 2)), { fg: leftFg });
   if (right && c.cols - rw > 10) {
     const x = c.cols - rw;
-    if (n) {
-      const badge = `airlock [${n}]`;
+    if (n2) {
+      const badge = `airlock [${n2}]`;
       c.text(x, y, badge, { fg: "warn", bold: true });
       c.text(x + badge.length, y, right.slice(badge.length), { fg: "dim" });
     } else c.text(x, y, right, { fg: "dim" });
@@ -10029,11 +10828,11 @@ function modal(c, s2, m) {
       return;
     }
     case "timeline": {
-      const n = m.checkpoints?.length ?? 0;
-      const b2 = centered(c, 64, Math.max(6, Math.min(n, 14) + 4));
+      const n2 = m.checkpoints?.length ?? 0;
+      const b2 = centered(c, 64, Math.max(6, Math.min(n2, 14) + 4));
       c.box(b2.x, b2.y, b2.w, b2.h, { double: true, title: `undo \xB7 ${m.name}`, clear: true });
       if (!m.checkpoints) c.text(b2.x + 2, b2.y + 1, "loading\u2026", { fg: "dim" });
-      else if (!n) c.text(b2.x + 2, b2.y + 1, "no checkpoints yet. c takes one.", { fg: "dim" }, b2.w - 4);
+      else if (!n2) c.text(b2.x + 2, b2.y + 1, "no checkpoints yet. c takes one.", { fg: "dim" }, b2.w - 4);
       const rowsAvail = b2.h - 3;
       const start = Math.max(0, m.sel - rowsAvail + 1);
       (m.checkpoints ?? []).slice(start, start + rowsAvail).forEach((cp, i) => {
@@ -10080,7 +10879,7 @@ function formModal(c, s2, f) {
   const t = TEMPLATES[formTemplate(f)];
   const builtin = formBuiltin(f);
   const plan2 = s2.me?.plan === "pro" ? "pro" : "payg";
-  const models = s2.catalog?.models ?? [];
+  const models2 = s2.catalog?.models ?? [];
   fields.forEach((id, i) => {
     const y = b2.y + 1 + i;
     if (y >= b2.y + b2.h - 3) return;
@@ -10118,7 +10917,7 @@ function formModal(c, s2, f) {
         v = `[${f.builtin ? "x" : " "}] built-in model, no subscription`;
         break;
       case "model":
-        v = `\u2039 ${models[f.model]?.id ?? `default${s2.catalog?.defaultModel ? ` (${s2.catalog.defaultModel})` : ""}`} \u203A`;
+        v = `\u2039 ${models2[f.model]?.id ?? `default${s2.catalog?.defaultModel ? ` (${s2.catalog.defaultModel})` : ""}`} \u203A`;
         break;
       case "schedule": {
         const p = SCHEDULE_LIST[f.schedule];
@@ -10236,7 +11035,7 @@ function startTui(d) {
       scheduleDraw();
     }
   };
-  const onSignal = () => finish(130);
+  const onSignal = () => finish2(130);
   const onCrash = (e) => crash(e);
   function listenKeys(on) {
     if (on) {
@@ -10256,7 +11055,7 @@ function startTui(d) {
     d.stdin.pause();
     d.stdout.write(LEAVE_ALT);
   }
-  function finish(code3, message) {
+  function finish2(code3, message) {
     if (finished) return;
     finished = true;
     controller.abort();
@@ -10271,7 +11070,7 @@ function startTui(d) {
     resolveDone(code3);
   }
   function crash(e) {
-    finish(1, `airgate ui crashed: ${e instanceof Error ? e.message : String(e)}`);
+    finish2(1, `airgate ui crashed: ${e instanceof Error ? e.message : String(e)}`);
   }
   const errText = (e) => {
     if (e instanceof ApiError) {
@@ -10300,7 +11099,7 @@ function startTui(d) {
       try {
         switch (e.type) {
           case "quit":
-            return finish(0);
+            return finish2(0);
           case "attach":
             return await handoff(e.podId, e.name);
           case "loadUsage": {
@@ -10538,6 +11337,9 @@ var COMMANDS = [
   task,
   runs,
   log,
+  ports,
+  preview,
+  share,
   checkpoints,
   checkpoint,
   rewind,
@@ -10548,6 +11350,9 @@ var COMMANDS = [
   mask,
   up,
   down2,
+  runTask,
+  models,
+  relay,
   usage,
   plan,
   upgrade,
@@ -10556,6 +11361,7 @@ var COMMANDS = [
   ui,
   mcp,
   open,
+  skill,
   status,
   help,
   version
@@ -10598,7 +11404,7 @@ function printCommandHelp(ui2, c) {
   ui2.out(`usage: airgate ${c.name}${c.usage ? " " + c.usage : ""}`);
   ui2.out();
   ui2.out(c.summary + ".");
-  for (const n of c.notes ?? []) ui2.out(n);
+  for (const n2 of c.notes ?? []) ui2.out(n2);
   const flags = flagLines({ ...c.flags ?? {}, json: GLOBAL_FLAGS.json });
   ui2.out();
   for (const l of formatTable(flags, void 0, 2)) ui2.out(l);
@@ -10733,7 +11539,7 @@ async function run(argv, io, opts2 = {}) {
   }
 }
 function suggest2(name) {
-  const near = COMMANDS.filter((c) => [c.name, ...c.aliases ?? []].some((n) => n.startsWith(name.slice(0, 2)))).map((c) => c.name);
+  const near = COMMANDS.filter((c) => [c.name, ...c.aliases ?? []].some((n2) => n2.startsWith(name.slice(0, 2)))).map((c) => c.name);
   return near.length ? `did you mean: ${near.slice(0, 3).join(", ")}? (airgate help)` : "see: airgate help";
 }