airgate 0.1.3 → 0.1.5

package/README.md

@@ -38,6 +38,7 @@ airgate run "get the failing tests passing"   # a fresh pod; the result comes ba
 airgate skill install                         # teach Claude Code when and how to use airgate
 claude mcp add airgate -- airgate mcp         # airgate as tools (pod_run, pod_up, pod_down…)
 airgate models connect claude --laptop        # a token from `claude setup-token`, kept on this laptop
+airgate models connect chatgpt --laptop       # or Codex on your ChatGPT plan
 ```
 
 The last line lets this laptop sign the pods' model calls while airgate runs, so tasks run without

package/dist/airgate.mjs

@@ -301,6 +301,72 @@ function dotenvExample(names) {
   return names.map((n2) => `${n2}=`).join("\n") + (names.length ? "\n" : "");
 }
 
+// ../sandbox/src/chatgpt.ts
+var CHATGPT_CODEX_BASE = "https://chatgpt.com/backend-api/codex";
+var CHATGPT_TOKEN_URL = "https://auth.openai.com/oauth/token";
+var CODEX_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
+function jwtClaims(token) {
+  const part = token?.split(".")[1];
+  if (!part) return null;
+  try {
+    const b64 = part.replace(/-/g, "+").replace(/_/g, "/");
+    const bin = atob(b64 + "=".repeat((4 - b64.length % 4) % 4));
+    return JSON.parse(new TextDecoder().decode(Uint8Array.from(bin, (c) => c.charCodeAt(0))));
+  } catch {
+    return null;
+  }
+}
+function accountIdOf(t) {
+  if (typeof t.account_id === "string" && t.account_id) return t.account_id;
+  const auth = jwtClaims(typeof t.id_token === "string" ? t.id_token : void 0)?.["https://api.openai.com/auth"];
+  return typeof auth?.chatgpt_account_id === "string" ? auth.chatgpt_account_id : null;
+}
+function parseChatgptLogin(text2) {
+  let j;
+  try {
+    j = JSON.parse(text2);
+  } catch {
+    throw new Error("not a Codex login: expected the auth.json that `codex login` writes");
+  }
+  const t = j.tokens && typeof j.tokens === "object" ? j.tokens : j;
+  if (typeof t.access_token !== "string" || typeof t.refresh_token !== "string") {
+    throw new Error("this Codex login has no ChatGPT tokens: sign in with ChatGPT in `codex login`, not an API key");
+  }
+  const account = accountIdOf(t);
+  if (!account) throw new Error("this Codex login doesn't name a ChatGPT account");
+  return { access_token: t.access_token, refresh_token: t.refresh_token, id_token: typeof t.id_token === "string" ? t.id_token : void 0, account_id: account };
+}
+function chatgptNeedsRefresh(t, now = Date.now(), windowMs = 5 * 6e4) {
+  const exp = jwtClaims(t.access_token)?.exp;
+  return typeof exp !== "number" || exp * 1e3 - now < windowMs;
+}
+async function refreshChatgpt(t, o = {}) {
+  const res = await (o.fetch ?? fetch)(o.tokenUrl ?? CHATGPT_TOKEN_URL, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({ client_id: CODEX_CLIENT_ID, grant_type: "refresh_token", refresh_token: t.refresh_token, scope: "openid profile email" }),
+    signal: AbortSignal.timeout(45e3)
+  });
+  if (!res.ok) {
+    const why = await res.text().catch(() => "");
+    throw new Error(
+      res.status === 400 || res.status === 401 ? "the ChatGPT sign-in expired or was revoked: connect it again (airgate models connect chatgpt)" : `couldn't renew the ChatGPT sign-in (${res.status}${why ? `: ${why.slice(0, 120)}` : ""})`
+    );
+  }
+  const r = await res.json();
+  if (!r.access_token) throw new Error("renewing the ChatGPT sign-in returned no access token");
+  return { ...t, access_token: r.access_token, refresh_token: r.refresh_token ?? t.refresh_token, id_token: r.id_token ?? t.id_token };
+}
+function chatgptUrl(path, base = CHATGPT_CODEX_BASE) {
+  return base + path.replace(/^\/?v1(?=\/|$)/, "").replace(/^(?!\/)/, "/");
+}
+function signChatgpt(t, headers) {
+  delete headers["x-api-key"];
+  headers.authorization = `Bearer ${t.access_token}`;
+  headers["chatgpt-account-id"] = t.account_id;
+  headers.originator ??= "codex_cli_rs";
+}
+
 // src/api.ts
 var UPLOAD_PART = 6 * 1024 * 1024;
 var ApiError = class extends Error {
@@ -365,6 +431,7 @@ var Api = class {
       if (e?.name === "AbortError") throw e;
       throw new NetworkError(this.gateway, e);
     }
+    if (opts2.bytes && res.ok) return Buffer.from(await res.arrayBuffer());
     const text2 = await res.text();
     if (opts2.text && res.ok) return text2;
     let data = {};
@@ -464,11 +531,11 @@ var Api = class {
   checkpoint(id, label2) {
     return this.request("POST", `/v1/pods/${enc(id)}/checkpoints`, { body: { label: label2 } }).then((r) => r.pod);
   }
-  restore(id, checkpointId) {
-    return this.request("POST", `/v1/pods/${enc(id)}/restore`, { body: { checkpointId } }).then((r) => r.pod);
+  restore(id, checkpointId2) {
+    return this.request("POST", `/v1/pods/${enc(id)}/restore`, { body: { checkpointId: checkpointId2 } }).then((r) => r.pod);
   }
-  fork(id, checkpointId, overrides) {
-    return this.request("POST", `/v1/pods/${enc(id)}/fork`, { body: { checkpointId, overrides } }).then((r) => r.pod);
+  fork(id, checkpointId2, overrides) {
+    return this.request("POST", `/v1/pods/${enc(id)}/fork`, { body: { checkpointId: checkpointId2, overrides } }).then((r) => r.pod);
   }
   diff(id, base) {
     return this.request("GET", `/v1/pods/${enc(id)}/diff?base=${encodeURIComponent(base)}`);
@@ -514,12 +581,44 @@ var Api = class {
   githubDisconnect(id) {
     return this.request("DELETE", `/v1/github/installations/${id}`);
   }
+  /* a workspace's files, live or at a checkpoint */
+  files(id, path = "", checkpoint2) {
+    const q = new URLSearchParams({ path, ...checkpoint2 ? { checkpoint: checkpoint2 } : {} });
+    return this.request("GET", `/v1/pods/${enc(id)}/files?${q}`);
+  }
+  fileRaw(id, path, checkpoint2) {
+    const q = new URLSearchParams({ path, ...checkpoint2 ? { checkpoint: checkpoint2 } : {} });
+    return this.request("GET", `/v1/pods/${enc(id)}/files/raw?${q}`, { bytes: true });
+  }
+  /** after launch: the network and the AI switch */
+  updatePod(id, patch) {
+    return this.request("PATCH", `/v1/pods/${enc(id)}`, { body: patch }).then((r) => r.pod);
+  }
+  /* saved snapshots */
+  snapshots() {
+    return this.request("GET", "/v1/snapshots").then((r) => r.snapshots);
+  }
+  saveSnapshot(id, name, checkpointId2) {
+    return this.request("POST", `/v1/pods/${enc(id)}/snapshots`, { body: { name, ...checkpointId2 ? { checkpointId: checkpointId2 } : {} } }).then((r) => r.snapshot);
+  }
+  sharedSnapshot(code3) {
+    return this.request("GET", `/v1/snapshots/shared/${enc(code3)}`).then((r) => r.snapshot);
+  }
+  launchSnapshot(ref, overrides = {}) {
+    return this.request("POST", `/v1/snapshots/${enc(ref)}/launch`, { body: { overrides } }).then((r) => r.pod);
+  }
+  shareSnapshot(ref, on) {
+    return this.request(on ? "POST" : "DELETE", `/v1/snapshots/${enc(ref)}/share`).then((r) => r.snapshot);
+  }
+  deleteSnapshot(ref) {
+    return this.request("DELETE", `/v1/snapshots/${enc(ref)}`);
+  }
   /* model sign-ins: connected to airgate (opt-in), and whether a laptop relay is connected */
   modelsAuth() {
     return this.request("GET", "/v1/models/auth");
   }
-  connectModel(vendor, value) {
-    return this.request("PUT", `/v1/models/auth/${enc(vendor)}`, { body: { value } });
+  connectModel(vendor, value, kind) {
+    return this.request("PUT", `/v1/models/auth/${enc(vendor)}`, { body: { value, ...kind ? { kind } : {} } });
   }
   disconnectModel(vendor) {
     return this.request("DELETE", `/v1/models/auth/${enc(vendor)}`);
@@ -4388,8 +4487,8 @@ function linked(s2, j, b2, ascii) {
   }
   return m;
 }
-function place3(s2, j, c, k, join7, a = ARMS.get(c), ascii = false, round = false) {
-  if (join7 && a !== void 0) {
+function place3(s2, j, c, k, join8, a = ARMS.get(c), ascii = false, round = false) {
+  if (join8 && a !== void 0) {
     const old = s2.chars[j], b2 = ascii ? asciiArms(old) : ARMS.get(old);
     if (b2 !== void 0) {
       const kept = linked(s2, j, b2, ascii);
@@ -4555,7 +4654,7 @@ function rect(s2, x, y, w, h, o) {
   if (title)
     for (const ch of title)
       code(ch);
-  const join7 = yes(o?.join, "join", true);
+  const join8 = yes(o?.join, "join", true);
   const k = paint(s2, color), fk = fillColor === void 0 ? k : paint(s2, fillColor);
   if (!finite3(x, y, w, h))
     return { x: 0, y: 0, cols: 0, rows: 0 };
@@ -4578,7 +4677,7 @@ function rect(s2, x, y, w, h, o) {
     const put = (cx, cy, e, reach = 255) => {
       const j = s2.index(cx, cy), a = ascii ? EDGE_ARMS[e] : ARMS.get(ed[e]);
       if (j >= 0)
-        place3(s2, j, ed[e], k, join7, a === void 0 ? a : a & reach, ascii, round);
+        place3(s2, j, ed[e], k, join8, a === void 0 ? a : a & reach, ascii, round);
     };
     const end = (i, n2, first, last) => n2 < 2 ? 255 : i === 0 ? 3 << first : i === n2 - 1 ? 3 << last : 255;
     const from = (o2, lo) => Math.max(lo, -o2), to = (o2, hi, n2) => Math.min(hi, n2 - o2);
@@ -4714,11 +4813,11 @@ function shape(s2, cx, cy, rx, ry, o, what, from = 0, span = 1) {
   const ch = char === "auto" ? "auto" : brush(char, `${/^[aeiou]/.test(what) ? "an" : "a"} ${what}'s char`);
   const f = fill === void 0 || fill === false ? null : brush(fill, "fill");
   const k = paint(s2, color), fk = fillColor === void 0 ? k : paint(s2, fillColor);
-  const join7 = yes(o?.join, "join", true);
+  const join8 = yes(o?.join, "join", true);
   ellipseCells(s2.cols, s2.rows, cx, cy, rx, ry, f !== null, (x, y, edge, slope) => {
     const j = y * s2.cols + x;
     if (edge)
-      place3(s2, j, ch === "auto" ? slope : ch, k, join7 && ch !== "auto");
+      place3(s2, j, ch === "auto" ? slope : ch, k, join8 && ch !== "auto");
     else
       s2.put(j, f, f === EMPTY ? NONE : fk);
   }, ch === "auto" ? s2.aspect : 0, from, span);
@@ -7235,6 +7334,7 @@ var launch = {
     'autopilot jobs: --cron "0 2 * * *" --task "update deps, run tests" (repeat both for more; --job-name names them). more later: airgate job add'
   ],
   flags: {
+    from: { type: "string", value: "snapshot", help: "start from a saved snapshot: its name, or a share code (airgate snapshots)" },
     name: { type: "string", value: "name" },
     template: { type: "string", value: "template", choices: TEMPLATE_IDS, help: `${TEMPLATE_IDS.join(" | ")} (default code)` },
     agent: { type: "string", value: "agent", choices: Object.keys(AGENTS), help: `${AGENT_NAMES.join(" | ")} (default: the template's first)` },
@@ -7257,6 +7357,18 @@ var launch = {
   },
   async run(ctx) {
     if (ctx.args.positionals.length) throw new UsageError(`unexpected "${ctx.args.positionals[0]}"`, "name the pod with --name");
+    const from = str(ctx.args, "from");
+    if (from) {
+      const o = {};
+      if (str(ctx.args, "name")) o.name = str(ctx.args, "name");
+      if (str(ctx.args, "agent")) o.agent = str(ctx.args, "agent");
+      if (ctx.args.flags.memory !== "standard") o.size = ctx.args.flags.memory;
+      if (ctx.args.flags.browser === true) o.browser = true;
+      const pod2 = await ctx.ui.spin(`starting a pod from ${from}`, async () => waitReady(ctx, await ctx.api.launchSnapshot(from, o)));
+      if (ctx.json) return ctx.ui.json(pod2);
+      ctx.ui.out(readyLine(ctx, pod2));
+      return void ctx.ui.out(`next: airgate attach ${pod2.spec.name}`);
+    }
     const spec = specFromFlags(ctx);
     if (spec.repo) await checkRepo(ctx, spec.repo);
     const envFile = str(ctx.args, "env");
@@ -7303,7 +7415,7 @@ function readDotenv(ctx, file) {
 }
 function specFromFlags(ctx, defaults = {}) {
   const a = ctx.args;
-  const network = str(a, "network") ?? "allowlist";
+  const network2 = str(a, "network") ?? "allowlist";
   const autoStop = str(a, "auto-stop");
   let autoStopMinutes = null;
   if (autoStop === "keep-awake" || autoStop === "never") autoStopMinutes = 0;
@@ -7342,12 +7454,12 @@ function specFromFlags(ctx, defaults = {}) {
     agent,
     size: str(a, "memory") ?? "standard",
     masking: a.flags.mask !== false,
-    network,
+    network: network2,
     autoStopMinutes,
     autoCheckpoint: a.flags.undo !== false
   };
   if (repo) spec.repo = repo;
-  if (network === "allowlist") spec.allow = [.../* @__PURE__ */ new Set([...DEFAULT_ALLOW, ...list(a, "allow").flatMap((h) => h.split(",")).map((h) => h.trim()).filter(Boolean)])];
+  if (network2 === "allowlist") spec.allow = [.../* @__PURE__ */ new Set([...DEFAULT_ALLOW, ...list(a, "allow").flatMap((h) => h.split(",")).map((h) => h.trim()).filter(Boolean)])];
   const terms = list(a, "mask-term");
   if (terms.length) spec.maskTerms = terms;
   if (template !== "code") spec.template = template;
@@ -7431,7 +7543,10 @@ var destroy = {
   flags: { yes: { type: "boolean", short: "y", help: "don't ask" } },
   async run(ctx) {
     const p = await resolvePod(ctx, ctx.args.positionals[0]);
-    if (!await confirm(ctx, `destroy ${p.spec.name} (${p.id})? its files and checkpoints are gone for good.`)) {
+    const pending = await ctx.api.diff(p.id, "up").catch(() => null);
+    const unpulled = pending?.files.length ?? 0;
+    if (unpulled && !ctx.json) ctx.ui.err(ctx.ui.ce("warn", `${p.spec.name} has ${unpulled} changed file(s) not brought back. keep them first: airgate down --pod ${p.spec.name} (or save it: airgate snapshot ${p.spec.name} <name>)`));
+    if (!await confirm(ctx, `destroy ${p.spec.name} (${p.id})? its files and checkpoints are gone for good${unpulled ? `, including ${unpulled} changed file(s)` : ""}.`)) {
       throw new CliError("not destroyed");
     }
     await ctx.ui.spin(`destroying ${p.spec.name}`, ctx.api.destroy(p.id));
@@ -7662,7 +7777,7 @@ var log = {
 import { createInterface } from "node:readline";
 
 // src/version.ts
-var VERSION = "0.1.3";
+var VERSION = "0.1.5";
 
 // src/commands/updown.ts
 import { appendFileSync, existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync5, realpathSync as realpathSync2, statSync as statSync2, writeFileSync as writeFileSync3 } from "node:fs";
@@ -7671,7 +7786,7 @@ import { basename, dirname as dirname2, isAbsolute, join as join4, relative as r
 
 // src/pack.ts
 import { spawn, spawnSync } from "node:child_process";
-import { existsSync, lstatSync } from "node:fs";
+import { existsSync, lstatSync, readdirSync } from "node:fs";
 import { join as join2 } from "node:path";
 var UPLOAD_LIMIT = 32 * 6 * 1024 * 1024;
 var TooLargeError = class extends Error {
@@ -7681,6 +7796,11 @@ var TooLargeError = class extends Error {
     this.limit = limit;
   }
 };
+function isEnvFile(path) {
+  const name = path.split("/").pop() ?? "";
+  return /^\.env($|\.)/.test(name) && !/\.(example|sample|template|dist|defaults?|schema)$/.test(name);
+}
+var ENV_EXCLUDES = [".env", ".env.local", ".env.*.local", ".env.development", ".env.production", ".env.test", ".env.staging", ".envrc"].map((p) => `--exclude=${p}`);
 function git(cwd, args, input) {
   const r = spawnSync("git", args, { cwd, input, maxBuffer: 256 * 1024 * 1024 });
   return { status: r.status ?? (r.error ? 127 : 1), stdout: r.stdout?.toString("utf8") ?? "", stderr: r.stderr?.toString("utf8") ?? "", error: r.error };
@@ -7709,7 +7829,7 @@ function gitFiles(dir) {
   return out;
 }
 function runTar(cwd, args, input, limit = UPLOAD_LIMIT) {
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     const child = spawn("tar", args, { cwd, env: { ...process.env, COPYFILE_DISABLE: "1" }, stdio: ["pipe", "pipe", "pipe"] });
     const chunks = [];
     let size2 = 0;
@@ -7729,7 +7849,7 @@ function runTar(cwd, args, input, limit = UPLOAD_LIMIT) {
     child.on("close", (code3) => {
       if (over2) return reject(new TooLargeError(limit));
       if (code3 !== 0) return reject(new Error(`tar failed: ${err.trim().split("\n").slice(-3).join(" ")}`));
-      resolve6(Buffer.concat(chunks));
+      resolve7(Buffer.concat(chunks));
     });
     child.stdin.on("error", () => void 0);
     child.stdin.end(input ?? "");
@@ -7737,13 +7857,17 @@ function runTar(cwd, args, input, limit = UPLOAD_LIMIT) {
 }
 async function packProject(dir, limit = UPLOAD_LIMIT) {
   if (isGitRepo(dir)) {
-    const files = gitFiles(dir).filter((f) => !f.startsWith(".airgate/"));
-    if (!files.length) throw new Error("no files to send (git sees nothing tracked or untracked here)");
-    const archive2 = await runTar(dir, ["--null", "-T", "-", "-czf", "-"], files.join("\0") + "\0", limit);
-    return { archive: archive2, files: files.length, git: true };
-  }
-  const archive = await runTar(dir, ["--exclude=node_modules", "--exclude=.git", "--exclude=.airgate", "-czf", "-", "."], null, limit);
-  return { archive, files: -1, git: false };
+    const tracked = new Set(git(dir, ["ls-files", "-c", "-z"]).stdout.split("\0"));
+    const all = gitFiles(dir).filter((f) => !f.startsWith(".airgate/"));
+    const skipped2 = all.filter((f) => (isEnvFile(f) || f.split("/").pop() === ".envrc") && !tracked.has(f));
+    const files2 = all.filter((f) => !skipped2.includes(f));
+    if (!files2.length) throw new Error("no files to send (git sees nothing tracked or untracked here)");
+    const archive2 = await runTar(dir, ["--null", "-T", "-", "-czf", "-"], files2.join("\0") + "\0", limit);
+    return { archive: archive2, files: files2.length, git: true, skipped: skipped2 };
+  }
+  const skipped = readdirSync(dir).filter((f) => isEnvFile(f) || f === ".envrc");
+  const archive = await runTar(dir, ["--exclude=node_modules", "--exclude=.git", "--exclude=.airgate", ...ENV_EXCLUDES, "-czf", "-", "."], null, limit);
+  return { archive, files: -1, git: false, skipped };
 }
 var CLAUDE_CONFIG = ["settings.json", "CLAUDE.md", "skills", "agents", "commands"];
 async function packClaudeConfig(home, limit = UPLOAD_LIMIT) {
@@ -7765,7 +7889,7 @@ import { gunzipSync } from "node:zlib";
 
 // src/sessions.ts
 import { createHash, randomUUID } from "node:crypto";
-import { closeSync, existsSync as existsSync2, mkdirSync as mkdirSync2, mkdtempSync, openSync, readdirSync, readFileSync as readFileSync4, readSync, realpathSync, renameSync as renameSync2, rmSync as rmSync2, statSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { closeSync, existsSync as existsSync2, mkdirSync as mkdirSync2, mkdtempSync, openSync, readdirSync as readdirSync2, readFileSync as readFileSync4, readSync, realpathSync, renameSync as renameSync2, rmSync as rmSync2, statSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { tmpdir } from "node:os";
 import { dirname, join as join3, relative } from "node:path";
 var POD_HOME = "/home/sprite";
@@ -7793,7 +7917,7 @@ function findClaudeSession(home, projectDir, id, env = {}) {
     const dir = join3(claudeHome(home, env), "projects", claudeKey(p));
     let names = [];
     try {
-      names = readdirSync(dir).filter((n2) => n2.endsWith(".jsonl"));
+      names = readdirSync2(dir).filter((n2) => n2.endsWith(".jsonl"));
     } catch {
       continue;
     }
@@ -7820,22 +7944,22 @@ function firstLine(file) {
   }
 }
 function codexRollouts(root, limit = 3e3) {
-  const files = [];
+  const files2 = [];
   const walk = (d, depth) => {
     let list2 = [];
     try {
-      list2 = readdirSync(d, { withFileTypes: true });
+      list2 = readdirSync2(d, { withFileTypes: true });
     } catch {
       return;
     }
     for (const x of list2) {
       const full = join3(d, x.name);
       if (x.isDirectory() && depth < 4) walk(full, depth + 1);
-      else if (x.isFile() && /^rollout-.*\.jsonl$/.test(x.name)) files.push({ f: full, m: statSync(full).mtimeMs });
+      else if (x.isFile() && /^rollout-.*\.jsonl$/.test(x.name)) files2.push({ f: full, m: statSync(full).mtimeMs });
     }
   };
   walk(join3(root, "sessions"), 0);
-  return files.sort((a, b2) => b2.m - a.m).slice(0, limit).map((x) => x.f);
+  return files2.sort((a, b2) => b2.m - a.m).slice(0, limit).map((x) => x.f);
 }
 var codexId = (file) => /([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/.exec(file)?.[1] ?? null;
 function findCodexSession(home, projectDir, id, env = {}) {
@@ -7879,7 +8003,7 @@ async function packSession(s2, projectDir, podPath, limit = UPLOAD_LIMIT) {
       names.push(`${s2.id}.jsonl`);
       if (s2.sidecar) {
         const copy2 = (src, dst) => {
-          for (const x of readdirSync(src, { withFileTypes: true })) {
+          for (const x of readdirSync2(src, { withFileTypes: true })) {
             const a = join3(src, x.name);
             const b2 = join3(dst, x.name);
             if (x.isDirectory()) {
@@ -8086,8 +8210,8 @@ function rewritePaths(text2, pre) {
   }
   return lines.join("\n");
 }
-function orderFiles(files) {
-  return [...files.filter((f) => f.risky), ...files.filter((f) => !f.risky)];
+function orderFiles(files2) {
+  return [...files2.filter((f) => f.risky), ...files2.filter((f) => !f.risky)];
 }
 function refusals(blocks) {
   const out = [];
@@ -8293,10 +8417,11 @@ var up = {
     const state = { gateway: ctx.cfg.gateway, podId: pod.id, podName: pod.spec.name, dir: podDir, at: Date.now(), ...sent.length ? { sessions: sent } : {} };
     writeState(projectDir, state);
     if (ctx.json) {
-      return ui2.json({ pod, dir: podDir, bytes: packed.archive.length, files: packed.files, config: config?.parts ?? [], baseSet: based, sessions: resumed, secrets: envSent });
+      return ui2.json({ pod, dir: podDir, bytes: packed.archive.length, files: packed.files, skipped: packed.skipped, config: config?.parts ?? [], baseSet: based, sessions: resumed, secrets: envSent });
     }
     ui2.out(`${ui2.c("ok", "up")}: ${name} \u2192 ${pod.spec.name}:~/${podDir} \xB7 ${packed.files >= 0 ? `${packed.files} files, ` : ""}${bytes(packed.archive.length)}`);
     if (config) ui2.out(`config: ~/.claude/{${config.parts.join(",")}}`);
+    if (packed.skipped.length) ui2.out(ui2.c("dim", `kept here: ${packed.skipped.join(", ")} (env files go to a pod only as secrets: --env${packed.skipped.includes(".env") ? "" : " <file>"})`));
     if (!based) ui2.err(ui2.ce("warn", "couldn't set the down base; the first down will include the files you sent"));
     if (envSent) {
       ui2.out(`secrets for ${pod.spec.name}: ${envSent.sent.length ? envSent.sent.join(", ") : "none"}${envSent.skipped.length ? ui2.c("dim", ` (skipped: ${envSent.skipped.join(", ")})`) : ""}`);
@@ -8340,9 +8465,9 @@ function printSessions(ctx, list2) {
 function printFiles(ctx, blocks, toErr) {
   const line2 = toErr ? ctx.ui.err : ctx.ui.out;
   const c = toErr ? ctx.ui.ce : ctx.ui.c;
-  const files = orderFiles(blocks.map((b2) => b2.file));
-  const width = Math.max(...files.map((f) => f.path.length + (f.from ? f.from.length + 4 : 0)));
-  for (const f of files) {
+  const files2 = orderFiles(blocks.map((b2) => b2.file));
+  const width = Math.max(...files2.map((f) => f.path.length + (f.from ? f.from.length + 4 : 0)));
+  for (const f of files2) {
     const name = f.from ? `${f.from} \u2192 ${f.path}` : f.path;
     const mark = f.risky ? c("warn", "!") : " ";
     line2(`  ${mark} ${STATUS_MARK[f.status]} ${f.risky ? name.padEnd(width) + "  " + c("warn", f.reason ?? "") : name}`.trimEnd());
@@ -8393,9 +8518,9 @@ var down2 = {
     const { blocks, outside } = selectProject(parsePatch(d.patch), prefix);
     const refused = refusals(blocks);
     const patch = blocks.map((b2) => b2.text).join("");
-    const files = orderFiles(blocks.map((b2) => b2.file));
+    const files2 = orderFiles(blocks.map((b2) => b2.file));
     if (ctx.json && (dry || !blocks.length)) {
-      return ui2.json({ pod: pod.id, base, files, outside, refused, patch, applied: false });
+      return ui2.json({ pod: pod.id, base, files: files2, outside, refused, patch, applied: false });
     }
     const takeSessions = !dry && !bool(ctx.args, "no-session") && found?.state.podId === pod.id;
     if (!blocks.length) {
@@ -8404,8 +8529,8 @@ var down2 = {
       if (takeSessions && found) await downSessions(ctx, found.root, found.state, pod);
       return;
     }
-    const risky = files.filter((f) => f.risky).length;
-    const head = `${files.length} file(s) from ${pod.spec.name}${risky ? `, ${risky} risky` : ""}:`;
+    const risky = files2.filter((f) => f.risky).length;
+    const head = `${files2.length} file(s) from ${pod.spec.name}${risky ? `, ${risky} risky` : ""}:`;
     if (dry) {
       ui2.err(head);
       printFiles(ctx, blocks, true);
@@ -8440,7 +8565,7 @@ var down2 = {
       throw new CliError(`the patch doesn't apply here, nothing changed:
 ${check.stderr.trim()}`, "commit or stash local edits to those files, or look with: airgate down --dry-run");
     }
-    if (!await confirm(ctx, `apply ${files.length} file(s)${risky ? ` (${risky} risky)` : ""}?`)) throw new CliError("nothing applied");
+    if (!await confirm(ctx, `apply ${files2.length} file(s)${risky ? ` (${risky} risky)` : ""}?`)) throw new CliError("nothing applied");
     const applied = git(top, ["apply", ...applyArgs], patch);
     if (applied.status !== 0) throw new CliError(`git apply failed: ${applied.stderr.trim()}`);
     let acked = true;
@@ -8450,8 +8575,8 @@ ${check.stderr.trim()}`, "commit or stash local edits to those files, or look wi
       acked = false;
     }
     const convo = takeSessions && found ? await downSessions(ctx, found.root, found.state, pod, true) : [];
-    if (ctx.json) return ui2.json({ pod: pod.id, base, files, outside, refused, applied: true, acked, sessions: convo });
-    ui2.out(`${ui2.c("ok", "down")}: applied ${files.length} file(s). review: git status \xB7 git diff`);
+    if (ctx.json) return ui2.json({ pod: pod.id, base, files: files2, outside, refused, applied: true, acked, sessions: convo });
+    ui2.out(`${ui2.c("ok", "down")}: applied ${files2.length} file(s). review: git status \xB7 git diff`);
     if (!acked) ui2.err(ui2.ce("warn", "couldn't tell the pod what was taken; the next down will show these again"));
     printSessions(ctx, convo);
   }
@@ -8512,7 +8637,7 @@ var LineReader = class {
   }
 };
 function ttyPrompt(stdin, out) {
-  return (question, opts2 = {}) => new Promise((resolve6, reject) => {
+  return (question, opts2 = {}) => new Promise((resolve7, reject) => {
     out.write(question);
     const decoder = new StringDecoder2("utf8");
     let answer = "";
@@ -8525,7 +8650,7 @@ function ttyPrompt(stdin, out) {
       stdin.pause();
       out.write("\n");
       if (err) reject(err);
-      else resolve6(answer);
+      else resolve7(answer);
     };
     const onData = (d) => {
       for (const ch of decoder.write(d)) {
@@ -8552,16 +8677,16 @@ function ttyPrompt(stdin, out) {
 }
 function openInBrowser(url) {
   const [cmd, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", '""', url]] : ["xdg-open", [url]];
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     try {
       const child = spawn2(cmd, args, { stdio: "ignore", detached: true });
-      child.on("error", () => resolve6(false));
+      child.on("error", () => resolve7(false));
       child.on("spawn", () => {
         child.unref();
-        resolve6(true);
+        resolve7(true);
       });
     } catch {
-      resolve6(false);
+      resolve7(false);
     }
   });
 }
@@ -8655,7 +8780,7 @@ async function runCommand(ctx, cmd, argv, cwd) {
 }
 
 // src/commands/run.ts
-import { existsSync as existsSync5, readFileSync as readFileSync7, rmSync as rmSync3, statSync as statSync3, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync8, rmSync as rmSync4, statSync as statSync3, writeFileSync as writeFileSync5 } from "node:fs";
 import { basename as basename2, resolve as resolve5 } from "node:path";
 import { randomBytes } from "node:crypto";
 
@@ -8678,9 +8803,9 @@ function readSaved(env) {
     return {};
   }
 }
-function saveLocal(env, vendor, value) {
+function saveLocal(env, vendor, value, kind = value ? kindOf(vendor, value) : "api_key") {
   const all = readSaved(env);
-  if (value) all[vendor] = { kind: kindOf(vendor, value), value };
+  if (value) all[vendor] = { kind, value };
   else delete all[vendor];
   const dir = configDir(env);
   mkdirSync4(dir, { recursive: true, mode: 448 });
@@ -8721,6 +8846,14 @@ function sign(vendor, auth, headers) {
   }
 }
 var UPSTREAM = { anthropic: "https://api.anthropic.com", openai: "https://api.openai.com" };
+async function chatgptReady(io, auth, f) {
+  const t = JSON.parse(auth.value);
+  if (!chatgptNeedsRefresh(t)) return t;
+  const fresh = await refreshChatgpt(t, { fetch: f, tokenUrl: io.env.AIRGATE_RELAY_CHATGPT_TOKEN_URL || void 0 });
+  auth.value = JSON.stringify(fresh);
+  if (auth.from === "this laptop") saveLocal(io.env, "openai", auth.value, "chatgpt");
+  return fresh;
+}
 function startRelay(o) {
   const vendors = Object.keys(o.auth).filter((v) => o.auth[v]);
   const inflight = /* @__PURE__ */ new Map();
@@ -8736,11 +8869,15 @@ function startRelay(o) {
     const auth = o.auth[m.vendor];
     if (!auth) return send({ t: "error", id: m.id, message: `this laptop has no ${vendorLabel(m.vendor)} sign-in` });
     const headers = { ...m.headers };
-    sign(m.vendor, auth, headers);
     const ctl = new AbortController();
     inflight.set(m.id, ctl);
     try {
-      const res = await o.fetch(`${base(m.vendor)}${m.path}`, {
+      let url = `${base(m.vendor)}${m.path}`;
+      if (auth.kind === "chatgpt") {
+        signChatgpt(await chatgptReady(o.io, auth, o.fetch), headers);
+        url = chatgptUrl(m.path, o.io.env.AIRGATE_RELAY_CHATGPT_URL || CHATGPT_CODEX_BASE);
+      } else sign(m.vendor, auth, headers);
+      const res = await o.fetch(url, {
         method: m.method,
         headers,
         body: m.body ? Buffer.from(m.body, "base64") : void 0,
@@ -8809,9 +8946,13 @@ function startRelay(o) {
 }
 
 // src/commands/models.ts
+import { spawnSync as spawnSync2 } from "node:child_process";
+import { mkdtempSync as mkdtempSync2, readFileSync as readFileSync7, rmSync as rmSync3 } from "node:fs";
+import { tmpdir as tmpdir2 } from "node:os";
+import { join as join6 } from "node:path";
 var HOW = {
   anthropic: "a Claude subscription token (run `claude setup-token` and paste what it prints) or an Anthropic API key",
-  openai: "an OpenAI API key"
+  openai: "an OpenAI API key (for a ChatGPT plan: airgate models connect chatgpt)"
 };
 function relayIfSignedIn(ctx, say) {
   const auth = localAuth(ctx.io.env);
@@ -8822,19 +8963,66 @@ function relayIfSignedIn(ctx, say) {
     return null;
   }
 }
+var KIND = { oauth_token: "subscription token", api_key: "API key", chatgpt: "ChatGPT plan" };
+async function connectChatgpt(ctx, laptop) {
+  const { ui: ui2 } = ctx;
+  let text2;
+  if (!ctx.io.stdin.isTTY) {
+    text2 = await readValue(ctx, "a Codex auth.json", "cat auth.json | airgate models connect chatgpt");
+  } else {
+    if (spawnSync2("codex", ["--version"], { stdio: "ignore" }).status !== 0) {
+      throw new CliError("Codex is not installed on this laptop", "npm i -g @openai/codex, then: airgate models connect chatgpt");
+    }
+    const home = mkdtempSync2(join6(tmpdir2(), "airgate-codex-"));
+    try {
+      ui2.err(ui2.ce("dim", "signing in to ChatGPT for airgate: a separate Codex login, so the one on this laptop stays as it is."));
+      const args = ["login", ...bool(ctx.args, "device") ? ["--device-auth"] : [], "-c", 'cli_auth_credentials_store="file"'];
+      const r2 = spawnSync2("codex", args, { stdio: "inherit", env: { ...process.env, ...ctx.io.env, CODEX_HOME: home } });
+      if (r2.status !== 0) throw new CliError("the ChatGPT sign-in did not finish", "try again, or with --device");
+      try {
+        text2 = readFileSync7(join6(home, "auth.json"), "utf8");
+      } catch {
+        throw new CliError("Codex didn't write a login file", "update Codex (npm i -g @openai/codex) and try again");
+      }
+    } finally {
+      rmSync3(home, { recursive: true, force: true });
+    }
+  }
+  let tokens2;
+  try {
+    tokens2 = parseChatgptLogin(text2);
+  } catch (e) {
+    throw new CliError(e.message);
+  }
+  const value = JSON.stringify(tokens2);
+  if (laptop) {
+    saveLocal(ctx.io.env, "openai", value, "chatgpt");
+    if (ctx.json) return ui2.json({ ok: true, vendor: "openai", kind: "chatgpt", where: "laptop" });
+    ui2.out(`${ui2.c("ok", "saved")} on this laptop only (ChatGPT plan). airgate doesn't get it.`);
+    return void ui2.out(ui2.c("dim", "pods' Codex uses it while this laptop is connected: airgate relay (airgate run and airgate mcp do this on their own)."));
+  }
+  const r = await ctx.api.connectModel("openai", value, "chatgpt");
+  if (ctx.json) return ui2.json({ ...r, where: "airgate" });
+  ui2.out(`${ui2.c("ok", "connected")}: ChatGPT plan for Codex, kept encrypted on airgate (renewed there) and never sent to a pod.`);
+  ui2.out(ui2.c("dim", "undo: airgate models disconnect chatgpt"));
+}
 var models = {
   name: "models",
   group: "account",
-  usage: "[connect|disconnect <claude|openai> [--laptop]]",
+  usage: "[connect|disconnect <claude|openai|chatgpt> [--laptop]]",
   summary: "how pods' agents sign in to their model: in the pod, through this laptop, or connected to airgate",
   example: "airgate models connect claude --laptop",
   notes: [
     "three ways, pick per your comfort: sign in inside the pod (nothing stored with airgate); this laptop signs (airgate relay: airgate holds nothing, works while the laptop is connected); or connect a sign-in to airgate (encrypted on the gateway, never sent to a pod).",
-    "connect <claude|openai>: saves it on airgate. with --laptop: saves it only on this laptop (~/.config/airgate/models.json), for airgate relay.",
+    "connect <claude|openai|chatgpt>: saves it on airgate. with --laptop: saves it only on this laptop (~/.config/airgate/models.json), for airgate relay.",
     "claude takes a subscription token (claude setup-token) or an API key; openai takes an API key. the value is read from a hidden prompt or stdin, never from the command line.",
+    "chatgpt (Codex on a ChatGPT plan) runs `codex login` into a fresh folder, so airgate gets its own Codex login and never the one on this laptop (sharing one would sign you out here). --device uses the device-code login. or pipe a Codex auth.json in.",
     "this laptop also uses CLAUDE_CODE_OAUTH_TOKEN, ANTHROPIC_API_KEY or OPENAI_API_KEY from its environment."
   ],
-  flags: { laptop: { type: "boolean", help: "keep the sign-in on this laptop only (for airgate relay)" } },
+  flags: {
+    laptop: { type: "boolean", help: "keep the sign-in on this laptop only (for airgate relay)" },
+    device: { type: "boolean", help: "chatgpt: sign in with a device code instead of this browser" }
+  },
   async run(ctx) {
     const { ui: ui2 } = ctx;
     const [action, who, extra] = ctx.args.positionals;
@@ -8853,6 +9041,7 @@ var models = {
         if (ctx.json) return ui2.json({ ...r2, vendor, where: "airgate" });
         return void ui2.out(r2.ok ? `${vendorLabel(vendor)}: disconnected from airgate. airgate no longer holds it.` : `${vendorLabel(vendor)} wasn't connected to airgate.`);
       }
+      if (who?.toLowerCase() === "chatgpt") return connectChatgpt(ctx, laptop);
       if (!ctx.json && ctx.io.stdin.isTTY) ui2.err(ui2.ce("dim", `paste ${HOW[vendor]}.`));
       const value = (await readValue(ctx, vendor === "anthropic" ? "your Claude sign-in" : "your OpenAI key", `printf %s "$KEY" | airgate models connect ${who}${laptop ? " --laptop" : ""}`)).trim();
       if (value.length < 20 || /\s/.test(value)) throw new CliError("that doesn't look like a key or token", HOW[vendor]);
@@ -8864,7 +9053,7 @@ var models = {
       }
       const r = await ctx.api.connectModel(vendor, value);
       if (ctx.json) return ui2.json({ ...r, where: "airgate" });
-      ui2.out(`${ui2.c("ok", "connected")}: ${vendorLabel(vendor)} (${r.kind === "oauth_token" ? "subscription token" : "API key"}), kept encrypted on airgate and never sent to a pod.`);
+      ui2.out(`${ui2.c("ok", "connected")}: ${vendorLabel(vendor)} (${KIND[r.kind] ?? r.kind}), kept encrypted on airgate and never sent to a pod.`);
       return void ui2.out(ui2.c("dim", `every pod's ${vendor === "anthropic" ? "Claude Code" : "Codex"} can use it now, unless signed in inside the pod. undo: airgate models disconnect ${who}`));
     }
     if (action) throw new UsageError(`unknown "${action}"`, "airgate models \xB7 airgate models connect claude [--laptop] \xB7 airgate models disconnect claude [--laptop]");
@@ -8876,8 +9065,8 @@ var models = {
       const l = local[v];
       return [
         vendorLabel(v),
-        c ? ui2.c("ok", `connected to airgate (${c.kind === "oauth_token" ? "subscription" : "API key"})`) : ui2.c("dim", "not on airgate"),
-        l ? `this laptop: ${l.from}${st.laptop.connected && st.laptop.vendors.includes(v) ? ui2.c("ok", " \xB7 relaying") : ""}` : ui2.c("dim", "not on this laptop")
+        c ? ui2.c("ok", `connected to airgate (${KIND[c.kind] ?? c.kind})`) : ui2.c("dim", "not on airgate"),
+        l ? `this laptop: ${l.kind === "chatgpt" ? "ChatGPT plan" : l.from}${st.laptop.connected && st.laptop.vendors.includes(v) ? ui2.c("ok", " \xB7 relaying") : ""}` : ui2.c("dim", "not on this laptop")
       ];
     });
     ui2.table(rows2, { head: ["model", "airgate", "laptop"] });
@@ -8935,7 +9124,7 @@ async function signInWarning(ctx, agent, relaying) {
   const list2 = await ctx.api.secrets().catch(() => null);
   if (list2?.account.some((s2) => m.secrets.includes(s2.name))) return null;
   if (!st && !list2) return null;
-  const who = m.vendor === "anthropic" ? "claude" : "openai";
+  const who = m.vendor === "anthropic" ? "claude" : "chatgpt";
   return `${AGENTS[agent].label} has no sign-in for a fresh pod. pick one: airgate models connect ${who} --laptop (this laptop signs; airgate holds nothing), or airgate models connect ${who} (kept on airgate)`;
 }
 async function finish(ctx, pod, keep) {
@@ -9029,11 +9218,11 @@ var runTask = {
         throw new CliError(`${projectDir} isn't a git repo, so the result can't come back as a patch`, "git init && git add -A && git commit -m base, or use --no-apply");
       }
       const sp = statePath(projectDir);
-      const before = existsSync5(sp) ? readFileSync7(sp, "utf8") : null;
+      const before = existsSync5(sp) ? readFileSync8(sp, "utf8") : null;
       const restoreState = () => {
         try {
           if (before !== null) writeFileSync5(sp, before);
-          else rmSync3(sp, { force: true });
+          else rmSync4(sp, { force: true });
         } catch {
         }
       };
@@ -9073,20 +9262,20 @@ When you are done, leave your changes in the files there (no need to commit or p
         ui2.err(ui2.ce("bad", keepNote(`the task finished, but its changes didn't come back: ${why}`)));
         return 1;
       }
-      const files = result.files ?? [];
+      const files2 = result.files ?? [];
       const keep = noApply || bool(ctx.args, "keep");
       await finish(ctx, pod, keep ? "sleep" : "destroy");
       if (!keep) restoreState();
-      if (ctx.json) return out({ applied: !noApply && files.length > 0, files, ...noApply ? { patch: result.patch ?? "" } : {}, pod_state: keep ? "sleeping" : "deleted" });
+      if (ctx.json) return out({ applied: !noApply && files2.length > 0, files: files2, ...noApply ? { patch: result.patch ?? "" } : {}, pod_state: keep ? "sleeping" : "deleted" });
       ctx.io.stdout.write(r.log.endsWith("\n") || !r.log ? r.log : r.log + "\n");
       if (noApply) {
         ctx.io.stdout.write(result.patch ?? "");
-        ui2.err(`${files.length} file(s) changed, not applied. apply: airgate down --pod ${name} \xB7 delete the pod: airgate destroy ${name}`);
+        ui2.err(`${files2.length} file(s) changed, not applied. apply: airgate down --pod ${name} \xB7 delete the pod: airgate destroy ${name}`);
         return 0;
       }
-      const risky = files.filter((f) => f.risky).length;
+      const risky = files2.filter((f) => f.risky).length;
       ui2.out(
-        `${ui2.c("ok", "done")}: ${files.length ? `${files.length} file(s) changed here${risky ? `, ${risky} risky` : ""}. review: git status \xB7 git diff` : "no changes came back"}` + (keep ? ` \xB7 the pod is kept (asleep): ${name}` : " \xB7 the pod is deleted")
+        `${ui2.c("ok", "done")}: ${files2.length ? `${files2.length} file(s) changed here${risky ? `, ${risky} risky` : ""}. review: git status \xB7 git diff` : "no changes came back"}` + (keep ? ` \xB7 the pod is kept (asleep): ${name}` : " \xB7 the pod is deleted")
       );
       return 0;
     }
@@ -9147,9 +9336,19 @@ var TOOLS = [
       model: s("built-in model: an OpenRouter id, e.g. qwen/qwen3-coder"),
       repo: s("GitHub repo to clone, owner/name"),
       browser: b("add Chromium + Playwright the agent can drive"),
-      jobs: { type: "array", items: jobSchema, description: "autopilot: scheduled jobs" }
+      jobs: { type: "array", items: jobSchema, description: "autopilot: scheduled jobs" },
+      fromSnapshot: s("start from a saved snapshot (its name, or a share code): its workspace and settings")
     }),
     async call(ctx, a) {
+      if (typeof a.fromSnapshot === "string" && a.fromSnapshot) {
+        const o = {};
+        if (typeof a.name === "string" && a.name) o.name = a.name;
+        if (typeof a.agent === "string" && a.agent) o.agent = a.agent;
+        if (a.browser === true) o.browser = true;
+        const pod2 = await waitReady(ctx, await ctx.api.launchSnapshot(a.fromSnapshot, o));
+        OWN.set(pod2.id, "launch");
+        return { name: pod2.spec.name, id: pod2.id, state: pod2.state, spec: pod2.spec };
+      }
       const argv = [];
       const opt = (flag, v) => typeof v === "string" && v && argv.push(`--${flag}`, v);
       opt("name", a.name);
@@ -9380,6 +9579,62 @@ var TOOLS = [
       return { deleted: p.spec.name, id: p.id };
     }
   },
+  {
+    name: "pod_files",
+    description: "List a folder of a pod's workspace (path relative to ~/workspace; '' for the top), live or at a checkpoint. Looking at a checkpoint never rewinds the pod.",
+    inputSchema: obj({ pod: POD, path: s("folder inside the workspace (default: the top)"), checkpoint: s("a checkpoint id or label (default: the live workspace)") }, ["pod"]),
+    async call(ctx, a) {
+      const p = await resolvePod(ctx, need(a, "pod"));
+      const cp = typeof a.checkpoint === "string" && a.checkpoint ? resolveCheckpoint(await ctx.api.checkpoints(p.id), a.checkpoint).id : void 0;
+      return ctx.api.files(p.id, typeof a.path === "string" ? a.path : "", cp);
+    }
+  },
+  {
+    name: "pod_file_read",
+    description: "Read one file of a pod's workspace, live or at a checkpoint (e.g. to compare with how it was before). Text up to 256 KB comes back as text; anything else as base64.",
+    inputSchema: obj({ pod: POD, path: s("file inside the workspace"), checkpoint: s("a checkpoint id or label (default: live)") }, ["pod", "path"]),
+    async call(ctx, a) {
+      const p = await resolvePod(ctx, need(a, "pod"));
+      const cp = typeof a.checkpoint === "string" && a.checkpoint ? resolveCheckpoint(await ctx.api.checkpoints(p.id), a.checkpoint).id : void 0;
+      const body = await ctx.api.fileRaw(p.id, need(a, "path"), cp);
+      const text2 = body.toString("utf8");
+      if (body.length <= 256 * 1024 && !text2.includes("\uFFFD") && !body.includes(0)) return { path: a.path, bytes: body.length, text: text2 };
+      return { path: a.path, bytes: body.length, base64: body.length <= 2 * 1024 * 1024 ? body.toString("base64") : void 0, note: body.length > 2 * 1024 * 1024 ? "too big to return here: airgate pull" : void 0 };
+    }
+  },
+  {
+    name: "snapshot_save",
+    description: "Save a pod's workspace (live, or at a checkpoint) as a named snapshot new pods can start from (pod_launch with fromSnapshot). Only files: never secrets, conversations or the masking vault.",
+    inputSchema: obj({ pod: POD, name: s("a name for it"), checkpoint: s("save it as it was at this checkpoint (default: live)") }, ["pod", "name"]),
+    async call(ctx, a) {
+      const p = await resolvePod(ctx, need(a, "pod"));
+      const cp = typeof a.checkpoint === "string" && a.checkpoint ? resolveCheckpoint(await ctx.api.checkpoints(p.id), a.checkpoint).id : void 0;
+      return ctx.api.saveSnapshot(p.id, need(a, "name"), cp);
+    }
+  },
+  {
+    name: "snapshots_list",
+    description: "Your saved snapshots (name, state, which pod they came from, whether shared).",
+    inputSchema: obj({}),
+    async call(ctx) {
+      return ctx.api.snapshots();
+    }
+  },
+  {
+    name: "pod_settings",
+    description: "Change a pod's network after launch (open | allowlist | off, extra allowlist hosts) or switch its AI off/on (aiOff: no model calls at all). Applies immediately. Only when the user asked for it.",
+    inputSchema: obj({ pod: POD, network: s("open | allowlist | off", { enum: ["open", "allowlist", "off"] }), allow: { type: "array", items: { type: "string" }, description: "extra allowlist hosts (replaces the list)" }, aiOff: b("true switches the pod's AI off; false back on") }, ["pod"]),
+    async call(ctx, a) {
+      const p = await resolvePod(ctx, need(a, "pod"));
+      const patch = {};
+      if (typeof a.network === "string") patch.network = a.network;
+      if (Array.isArray(a.allow)) patch.allow = a.allow.map(String);
+      if (typeof a.aiOff === "boolean") patch.aiOff = a.aiOff;
+      if (!Object.keys(patch).length) throw new UsageError("nothing to change: network, allow or aiOff");
+      const pod = await ctx.api.updatePod(p.id, patch);
+      return { name: pod.spec.name, network: pod.spec.network, allow: pod.spec.allow ?? [], aiOff: Boolean(pod.spec.aiOff) };
+    }
+  },
   {
     name: "pod_ports",
     description: "What is listening in a pod (dev servers on ports 1024+) and its preview links.",
@@ -9493,7 +9748,7 @@ var mcp = {
 // src/commands/misc.ts
 import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync6 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { join as join6 } from "node:path";
+import { join as join7 } from "node:path";
 var PAGES = ["pods", "airlock", "usage", "settings", "mask", "chat", "notes", "data", "status"];
 var open = {
   name: "open",
@@ -9569,12 +9824,12 @@ var skill = {
     if (!text2.startsWith("---")) throw new CliError(`${url} isn't a skill file`);
     if (action === "show") return void ctx.io.stdout.write(text2);
     if (action !== "install") throw new UsageError(`unknown action "${action}"`, "airgate skill install [--project] | airgate skill show");
-    const base = bool(ctx.args, "project") ? join6(ctx.io.cwd, ".claude") : join6(ctx.io.env.HOME ?? homedir3(), ".claude");
-    const dir = join6(base, "skills", "airgate");
+    const base = bool(ctx.args, "project") ? join7(ctx.io.cwd, ".claude") : join7(ctx.io.env.HOME ?? homedir3(), ".claude");
+    const dir = join7(base, "skills", "airgate");
     mkdirSync5(dir, { recursive: true });
-    writeFileSync6(join6(dir, "SKILL.md"), text2);
-    if (ctx.json) return ctx.ui.json({ installed: join6(dir, "SKILL.md") });
-    ctx.ui.out(`${ctx.ui.c("ok", "installed")} the airgate skill: ${join6(dir, "SKILL.md")}`);
+    writeFileSync6(join7(dir, "SKILL.md"), text2);
+    if (ctx.json) return ctx.ui.json({ installed: join7(dir, "SKILL.md") });
+    ctx.ui.out(`${ctx.ui.c("ok", "installed")} the airgate skill: ${join7(dir, "SKILL.md")}`);
     ctx.ui.out(ctx.ui.c("dim", 'claude code picks it up in its next session. ask it to "move this to an airgate pod".'));
   }
 };
@@ -9727,7 +9982,7 @@ var race = {
   async run(ctx) {
     const [ref, cpRef = "current"] = ctx.args.positionals;
     const p = await resolvePod(ctx, ref);
-    const checkpointId = cpRef === "current" ? "current" : resolveCheckpoint(await ctx.api.checkpoints(p.id), cpRef).id;
+    const checkpointId2 = cpRef === "current" ? "current" : resolveCheckpoint(await ctx.api.checkpoints(p.id), cpRef).id;
     const overrides = {};
     const agent = str(ctx.args, "agent");
     if (agent) overrides.agent = agent;
@@ -9735,7 +9990,7 @@ var race = {
     if (name) overrides.name = name;
     let pod;
     try {
-      pod = await ctx.ui.spin(`forking ${p.spec.name}`, async () => waitReady(ctx, await ctx.api.fork(p.id, checkpointId, overrides)));
+      pod = await ctx.ui.spin(`forking ${p.spec.name}`, async () => waitReady(ctx, await ctx.api.fork(p.id, checkpointId2, overrides)));
     } catch (e) {
       if (e instanceof ApiError && e.code === "checkpoint_not_mounted") {
         throw new CliError("that checkpoint can't be read on the provider right now", `race from the live workspace: airgate race ${p.spec.name} current (or rewind first)`);
@@ -9744,7 +9999,7 @@ var race = {
     }
     if (ctx.json) return ctx.ui.json(pod);
     ctx.ui.out(readyLine(ctx, pod));
-    ctx.ui.out(`racing ${p.spec.name} from ${checkpointId === "current" ? "its current state" : `"${cpRef}"`}. compare: airgate down --pod ${pod.spec.name} --dry-run`);
+    ctx.ui.out(`racing ${p.spec.name} from ${checkpointId2 === "current" ? "its current state" : `"${cpRef}"`}. compare: airgate down --pod ${pod.spec.name} --dry-run`);
   }
 };
 
@@ -10008,19 +10263,19 @@ function validateForm(f) {
   return e;
 }
 function formSpec(f, catalog = null) {
-  const network = NETWORK_LIST[f.network];
+  const network2 = NETWORK_LIST[f.network];
   const template = formTemplate(f);
   const spec = {
     name: f.name.trim(),
     agent: AGENT_LIST[f.agent],
     size: SIZE_LIST[f.memory],
     masking: f.mask,
-    network,
+    network: network2,
     autoStopMinutes: null,
     autoCheckpoint: f.undo
   };
   if (f.repo.trim()) spec.repo = f.repo.trim();
-  if (network === "allowlist") spec.allow = DEFAULT_ALLOW2;
+  if (network2 === "allowlist") spec.allow = DEFAULT_ALLOW2;
   if (template !== "code") spec.template = template;
   if (f.browser) spec.browser = true;
   if (template === "autopilot") spec.jobs = [{ cron: formCron(f), task: f.task.trim(), enabled: true }];
@@ -11297,6 +11552,171 @@ var ui = {
   }
 };
 
+// src/commands/workspace.ts
+import { writeFileSync as writeFileSync7, existsSync as existsSync6, statSync as statSync4 } from "node:fs";
+import { basename as basename3, resolve as resolve6 } from "node:path";
+async function checkpointId(ctx, podId, ref) {
+  if (!ref || ref === "current") return void 0;
+  return resolveCheckpoint(await ctx.api.checkpoints(podId), ref).id;
+}
+var files = {
+  name: "files",
+  aliases: ["ls-files"],
+  group: "pods",
+  usage: "<pod> [path] [--at <checkpoint>]",
+  summary: "what's in a pod's workspace, live or at a checkpoint (nothing is rewound)",
+  example: 'airgate files web src --at "#2"',
+  notes: ["--at takes a checkpoint id, its label, or #1 for the newest (airgate checkpoints <pod>). get a file with: airgate pull <pod> <path>"],
+  flags: { at: { type: "string", value: "checkpoint", help: "look at a checkpoint instead of the live workspace" } },
+  async run(ctx) {
+    const [ref, path = ""] = ctx.args.positionals;
+    if (!ref) throw new UsageError("which pod? airgate files <pod> [path]");
+    const pod = await resolvePod(ctx, ref);
+    const at3 = await checkpointId(ctx, pod.id, str(ctx.args, "at"));
+    const r = await ctx.api.files(pod.id, path, at3);
+    if (ctx.json) return ctx.ui.json(r);
+    if (!r.entries.length) return void ctx.ui.out(ctx.ui.c("dim", `${r.path || "~/workspace"} is empty`));
+    ctx.ui.table(
+      r.entries.map((e) => [e.type === "dir" ? `${e.name}/` : e.name, e.type === "dir" ? "" : ctx.ui.c("dim", bytes(e.size))]),
+      { head: [`${pod.spec.name}:~/workspace/${r.path}${at3 ? ` @ ${str(ctx.args, "at")}` : ""}`, ""] }
+    );
+  }
+};
+var pull = {
+  name: "pull",
+  group: "pods",
+  usage: "<pod> <path> [--at <checkpoint>] [-o <file>]",
+  summary: "copy one file from a pod (live or at a checkpoint) to this laptop",
+  example: 'airgate pull web src/app.ts --at "before the refactor"',
+  notes: ["up to 25 MB. without -o it lands in this folder under its own name (never over an existing file unless --force). -o - prints it."],
+  flags: {
+    at: { type: "string", value: "checkpoint", help: "from a checkpoint instead of the live workspace" },
+    out: { type: "string", short: "o", value: "file", help: "where to save it (- prints it)" },
+    force: { type: "boolean", help: "overwrite an existing file" }
+  },
+  async run(ctx) {
+    const [ref, path] = ctx.args.positionals;
+    if (!ref || !path) throw new UsageError("airgate pull <pod> <path>");
+    const pod = await resolvePod(ctx, ref);
+    const at3 = await checkpointId(ctx, pod.id, str(ctx.args, "at"));
+    const body = await ctx.ui.spin(`reading ${path}`, ctx.api.fileRaw(pod.id, path, at3));
+    const out = str(ctx.args, "out") ?? basename3(path);
+    if (out === "-") return void ctx.io.stdout.write(body);
+    const dest = resolve6(ctx.io.cwd, out);
+    if (existsSync6(dest) && !bool(ctx.args, "force")) {
+      if (statSync4(dest).isDirectory()) return void save2(ctx, resolve6(dest, basename3(path)), body);
+      throw new CliError(`${out} exists here`, "pick another name with -o, or --force to overwrite");
+    }
+    save2(ctx, dest, body);
+  }
+};
+function save2(ctx, dest, body) {
+  writeFileSync7(dest, body);
+  if (ctx.json) return ctx.ui.json({ saved: dest, bytes: body.length });
+  ctx.ui.out(`${ctx.ui.c("ok", "saved")} ${dest} (${bytes(body.length)})`);
+}
+var ai = {
+  name: "ai",
+  group: "pods",
+  usage: "<pod> on|off",
+  summary: "switch a pod's AI off (no model calls at all) or back on",
+  example: "airgate ai web off",
+  notes: ["off: airgate refuses the pod's model calls, and on allowlist or off networks the model hosts are closed too (an open network can still reach them directly)."],
+  async run(ctx) {
+    const [ref, state] = ctx.args.positionals;
+    if (!ref || state !== "on" && state !== "off") throw new UsageError("airgate ai <pod> on|off");
+    const pod = await resolvePod(ctx, ref);
+    const p = await ctx.api.updatePod(pod.id, { aiOff: state === "off" });
+    if (ctx.json) return ctx.ui.json(p);
+    ctx.ui.out(state === "off" ? `${ctx.ui.c("warn", "AI off")} for ${p.spec.name}: no model calls.${p.spec.network === "open" ? ctx.ui.c("dim", " (its network is open, so it could still reach a model directly: airgate network " + p.spec.name + " allowlist)") : ""}` : `${ctx.ui.c("ok", "AI on")} for ${p.spec.name}.`);
+  }
+};
+var network = {
+  name: "network",
+  group: "pods",
+  usage: "<pod> [open|allowlist|off] [--allow host,host] [--add host] [--remove host]",
+  summary: "see or change what a pod can reach on the internet, now",
+  example: "airgate network web allowlist --add api.stripe.com",
+  notes: [
+    "allowlist: common package registries and GitHub, plus your hosts; off: only the agent's model and airgate; open: anything.",
+    "the agent's own model and sign-in hosts stay reachable unless its AI is off."
+  ],
+  flags: {
+    allow: { type: "string", value: "hosts", help: "replace the extra hosts (comma separated)" },
+    add: { type: "string", value: "host", help: "add hosts (comma separated)" },
+    remove: { type: "string", value: "host", help: "remove hosts (comma separated)" }
+  },
+  async run(ctx) {
+    const [ref, mode] = ctx.args.positionals;
+    if (!ref) throw new UsageError("airgate network <pod> [open|allowlist|off]");
+    if (mode && !["open", "allowlist", "off"].includes(mode)) throw new UsageError("open, allowlist or off");
+    const pod = await resolvePod(ctx, ref);
+    const list2 = (v) => (v ?? "").split(",").map((h) => h.trim().toLowerCase()).filter(Boolean);
+    let allow = pod.spec.allow ?? [];
+    if (str(ctx.args, "allow") !== void 0) allow = list2(str(ctx.args, "allow"));
+    allow = [.../* @__PURE__ */ new Set([...allow, ...list2(str(ctx.args, "add"))])].filter((h) => !list2(str(ctx.args, "remove")).includes(h));
+    const changed = mode || ["allow", "add", "remove"].some((k) => str(ctx.args, k) !== void 0);
+    const p = changed ? await ctx.api.updatePod(pod.id, { ...mode ? { network: mode } : {}, allow }) : pod;
+    if (ctx.json) return ctx.ui.json({ network: p.spec.network, allow: p.spec.allow ?? [], aiOff: Boolean(p.spec.aiOff) });
+    ctx.ui.out(`${p.spec.name}: ${p.spec.network}${p.spec.network === "allowlist" && (p.spec.allow ?? []).length ? ` + ${(p.spec.allow ?? []).join(", ")}` : ""}${p.spec.aiOff ? ctx.ui.c("warn", " \xB7 AI off") : ""}${changed ? ctx.ui.c("dim", " (applied now)") : ""}`);
+  }
+};
+var snapshot2 = {
+  name: "snapshot",
+  aliases: ["snapshots"],
+  group: "undo \xB7 race",
+  usage: "[<pod> <name> [--at <checkpoint>] | share|unshare|rm <name> | show <code>]",
+  summary: "save a pod as a snapshot new pods start from; share it by code",
+  example: 'airgate snapshot web "clean base"',
+  notes: [
+    'a snapshot is a frozen copy of the workspace (live, or at a checkpoint): it stays when the pod is deleted. start a pod from it: airgate launch --from "<name>" (or a share code).',
+    "only the workspace is copied: never the pod's secrets, its agent's conversations or its masking vault. share gives a code anyone signed in to airgate can launch from; unshare stops it.",
+    "with no arguments: your snapshots."
+  ],
+  flags: { at: { type: "string", value: "checkpoint", help: "save the workspace as it was at a checkpoint" }, yes: { type: "boolean", short: "y", help: "don't ask" } },
+  async run(ctx) {
+    const { ui: ui2 } = ctx;
+    const [a, b2, extra] = ctx.args.positionals;
+    if (extra) throw new UsageError(`unexpected "${extra}" (put names with spaces in quotes)`);
+    if (!a) {
+      const list2 = await ctx.api.snapshots();
+      if (ctx.json) return ui2.json(list2);
+      if (!list2.length) return void ui2.out(ui2.c("dim", "no snapshots yet. save one: airgate snapshot <pod> <name>"));
+      ui2.table(
+        list2.map((s3) => [s3.name, s3.state === "ready" ? ui2.c("ok", "ready") : s3.state === "failed" ? ui2.c("bad", "failed") : ui2.c("warn", "saving"), `from ${s3.from.podName}`, s3.shareCode ? ui2.c("warn", `shared: ${s3.shareCode}`) : ui2.c("dim", "private")]),
+        { head: ["snapshot", "", "", ""] }
+      );
+      return void ui2.out(ui2.c("dim", 'start a pod from one: airgate launch --from "<name>"'));
+    }
+    if (a === "share" || a === "unshare") {
+      if (!b2) throw new UsageError(`airgate snapshot ${a} <name>`);
+      const s3 = await ctx.api.shareSnapshot(b2, a === "share");
+      if (ctx.json) return ui2.json(s3);
+      if (a === "unshare") return void ui2.out(`${s3.name}: private again; its old code no longer works.`);
+      ui2.out(`${s3.name}: share code ${s3.shareCode ?? ""}`);
+      return void ui2.out(ui2.c("dim", `anyone signed in to airgate can start a pod from it: airgate launch --from ${s3.shareCode}. it shares only the workspace files.`));
+    }
+    if (a === "rm" || a === "delete") {
+      if (!b2) throw new UsageError("airgate snapshot rm <name>");
+      if (!await confirm(ctx, `delete the snapshot "${b2}"? pods already started from it keep their files.`)) throw new CliError("nothing deleted");
+      await ctx.api.deleteSnapshot(b2);
+      return ctx.json ? ui2.json({ ok: true }) : void ui2.out(`deleted ${b2}.`);
+    }
+    if (a === "show") {
+      if (!b2) throw new UsageError("airgate snapshot show <code>");
+      const s3 = await ctx.api.sharedSnapshot(b2);
+      if (ctx.json) return ui2.json(s3);
+      return void ui2.out(`${s3.name} \xB7 ${s3.agent} \xB7 ${s3.template}${s3.state !== "ready" ? ` \xB7 ${s3.state}` : ""}. start a pod from it: airgate launch --from ${b2}`);
+    }
+    if (!b2) throw new UsageError("airgate snapshot <pod> <name>  (or: airgate snapshots)");
+    const pod = await resolvePod(ctx, a);
+    const at3 = await checkpointId(ctx, pod.id, str(ctx.args, "at"));
+    const s2 = await ui2.spin(`saving ${pod.spec.name} as "${b2}"`, ctx.api.saveSnapshot(pod.id, b2, at3));
+    if (ctx.json) return ui2.json(s2);
+    ui2.out(`${ui2.c("ok", "saved")} "${s2.name}" from ${pod.spec.name}${at3 ? ` at ${str(ctx.args, "at")}` : ""}. ${ui2.c("dim", `start a pod from it: airgate launch --from "${s2.name}" \xB7 share it: airgate snapshot share "${s2.name}"`)}`);
+  }
+};
+
 // src/cli.ts
 var help = {
   name: "help",
@@ -11353,6 +11773,11 @@ var COMMANDS = [
   runTask,
   models,
   relay,
+  files,
+  pull,
+  snapshot2,
+  ai,
+  network,
   usage,
   plan,
   upgrade,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "airgate",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Give your AI its own computer: the airgate command line.",
   "type": "module",
   "bin": {