airgate 0.1.4 → 0.1.5

package/dist/airgate.mjs

@@ -431,6 +431,7 @@ var Api = class {
       if (e?.name === "AbortError") throw e;
       throw new NetworkError(this.gateway, e);
     }
+    if (opts2.bytes && res.ok) return Buffer.from(await res.arrayBuffer());
     const text2 = await res.text();
     if (opts2.text && res.ok) return text2;
     let data = {};
@@ -530,11 +531,11 @@ var Api = class {
   checkpoint(id, label2) {
     return this.request("POST", `/v1/pods/${enc(id)}/checkpoints`, { body: { label: label2 } }).then((r) => r.pod);
   }
-  restore(id, checkpointId) {
-    return this.request("POST", `/v1/pods/${enc(id)}/restore`, { body: { checkpointId } }).then((r) => r.pod);
+  restore(id, checkpointId2) {
+    return this.request("POST", `/v1/pods/${enc(id)}/restore`, { body: { checkpointId: checkpointId2 } }).then((r) => r.pod);
   }
-  fork(id, checkpointId, overrides) {
-    return this.request("POST", `/v1/pods/${enc(id)}/fork`, { body: { checkpointId, overrides } }).then((r) => r.pod);
+  fork(id, checkpointId2, overrides) {
+    return this.request("POST", `/v1/pods/${enc(id)}/fork`, { body: { checkpointId: checkpointId2, overrides } }).then((r) => r.pod);
   }
   diff(id, base) {
     return this.request("GET", `/v1/pods/${enc(id)}/diff?base=${encodeURIComponent(base)}`);
@@ -580,6 +581,38 @@ var Api = class {
   githubDisconnect(id) {
     return this.request("DELETE", `/v1/github/installations/${id}`);
   }
+  /* a workspace's files, live or at a checkpoint */
+  files(id, path = "", checkpoint2) {
+    const q = new URLSearchParams({ path, ...checkpoint2 ? { checkpoint: checkpoint2 } : {} });
+    return this.request("GET", `/v1/pods/${enc(id)}/files?${q}`);
+  }
+  fileRaw(id, path, checkpoint2) {
+    const q = new URLSearchParams({ path, ...checkpoint2 ? { checkpoint: checkpoint2 } : {} });
+    return this.request("GET", `/v1/pods/${enc(id)}/files/raw?${q}`, { bytes: true });
+  }
+  /** after launch: the network and the AI switch */
+  updatePod(id, patch) {
+    return this.request("PATCH", `/v1/pods/${enc(id)}`, { body: patch }).then((r) => r.pod);
+  }
+  /* saved snapshots */
+  snapshots() {
+    return this.request("GET", "/v1/snapshots").then((r) => r.snapshots);
+  }
+  saveSnapshot(id, name, checkpointId2) {
+    return this.request("POST", `/v1/pods/${enc(id)}/snapshots`, { body: { name, ...checkpointId2 ? { checkpointId: checkpointId2 } : {} } }).then((r) => r.snapshot);
+  }
+  sharedSnapshot(code3) {
+    return this.request("GET", `/v1/snapshots/shared/${enc(code3)}`).then((r) => r.snapshot);
+  }
+  launchSnapshot(ref, overrides = {}) {
+    return this.request("POST", `/v1/snapshots/${enc(ref)}/launch`, { body: { overrides } }).then((r) => r.pod);
+  }
+  shareSnapshot(ref, on) {
+    return this.request(on ? "POST" : "DELETE", `/v1/snapshots/${enc(ref)}/share`).then((r) => r.snapshot);
+  }
+  deleteSnapshot(ref) {
+    return this.request("DELETE", `/v1/snapshots/${enc(ref)}`);
+  }
   /* model sign-ins: connected to airgate (opt-in), and whether a laptop relay is connected */
   modelsAuth() {
     return this.request("GET", "/v1/models/auth");
@@ -7301,6 +7334,7 @@ var launch = {
     'autopilot jobs: --cron "0 2 * * *" --task "update deps, run tests" (repeat both for more; --job-name names them). more later: airgate job add'
   ],
   flags: {
+    from: { type: "string", value: "snapshot", help: "start from a saved snapshot: its name, or a share code (airgate snapshots)" },
     name: { type: "string", value: "name" },
     template: { type: "string", value: "template", choices: TEMPLATE_IDS, help: `${TEMPLATE_IDS.join(" | ")} (default code)` },
     agent: { type: "string", value: "agent", choices: Object.keys(AGENTS), help: `${AGENT_NAMES.join(" | ")} (default: the template's first)` },
@@ -7323,6 +7357,18 @@ var launch = {
   },
   async run(ctx) {
     if (ctx.args.positionals.length) throw new UsageError(`unexpected "${ctx.args.positionals[0]}"`, "name the pod with --name");
+    const from = str(ctx.args, "from");
+    if (from) {
+      const o = {};
+      if (str(ctx.args, "name")) o.name = str(ctx.args, "name");
+      if (str(ctx.args, "agent")) o.agent = str(ctx.args, "agent");
+      if (ctx.args.flags.memory !== "standard") o.size = ctx.args.flags.memory;
+      if (ctx.args.flags.browser === true) o.browser = true;
+      const pod2 = await ctx.ui.spin(`starting a pod from ${from}`, async () => waitReady(ctx, await ctx.api.launchSnapshot(from, o)));
+      if (ctx.json) return ctx.ui.json(pod2);
+      ctx.ui.out(readyLine(ctx, pod2));
+      return void ctx.ui.out(`next: airgate attach ${pod2.spec.name}`);
+    }
     const spec = specFromFlags(ctx);
     if (spec.repo) await checkRepo(ctx, spec.repo);
     const envFile = str(ctx.args, "env");
@@ -7369,7 +7415,7 @@ function readDotenv(ctx, file) {
 }
 function specFromFlags(ctx, defaults = {}) {
   const a = ctx.args;
-  const network = str(a, "network") ?? "allowlist";
+  const network2 = str(a, "network") ?? "allowlist";
   const autoStop = str(a, "auto-stop");
   let autoStopMinutes = null;
   if (autoStop === "keep-awake" || autoStop === "never") autoStopMinutes = 0;
@@ -7408,12 +7454,12 @@ function specFromFlags(ctx, defaults = {}) {
     agent,
     size: str(a, "memory") ?? "standard",
     masking: a.flags.mask !== false,
-    network,
+    network: network2,
     autoStopMinutes,
     autoCheckpoint: a.flags.undo !== false
   };
   if (repo) spec.repo = repo;
-  if (network === "allowlist") spec.allow = [.../* @__PURE__ */ new Set([...DEFAULT_ALLOW, ...list(a, "allow").flatMap((h) => h.split(",")).map((h) => h.trim()).filter(Boolean)])];
+  if (network2 === "allowlist") spec.allow = [.../* @__PURE__ */ new Set([...DEFAULT_ALLOW, ...list(a, "allow").flatMap((h) => h.split(",")).map((h) => h.trim()).filter(Boolean)])];
   const terms = list(a, "mask-term");
   if (terms.length) spec.maskTerms = terms;
   if (template !== "code") spec.template = template;
@@ -7497,7 +7543,10 @@ var destroy = {
   flags: { yes: { type: "boolean", short: "y", help: "don't ask" } },
   async run(ctx) {
     const p = await resolvePod(ctx, ctx.args.positionals[0]);
-    if (!await confirm(ctx, `destroy ${p.spec.name} (${p.id})? its files and checkpoints are gone for good.`)) {
+    const pending = await ctx.api.diff(p.id, "up").catch(() => null);
+    const unpulled = pending?.files.length ?? 0;
+    if (unpulled && !ctx.json) ctx.ui.err(ctx.ui.ce("warn", `${p.spec.name} has ${unpulled} changed file(s) not brought back. keep them first: airgate down --pod ${p.spec.name} (or save it: airgate snapshot ${p.spec.name} <name>)`));
+    if (!await confirm(ctx, `destroy ${p.spec.name} (${p.id})? its files and checkpoints are gone for good${unpulled ? `, including ${unpulled} changed file(s)` : ""}.`)) {
       throw new CliError("not destroyed");
     }
     await ctx.ui.spin(`destroying ${p.spec.name}`, ctx.api.destroy(p.id));
@@ -7728,7 +7777,7 @@ var log = {
 import { createInterface } from "node:readline";
 
 // src/version.ts
-var VERSION = "0.1.4";
+var VERSION = "0.1.5";
 
 // src/commands/updown.ts
 import { appendFileSync, existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync5, realpathSync as realpathSync2, statSync as statSync2, writeFileSync as writeFileSync3 } from "node:fs";
@@ -7780,7 +7829,7 @@ function gitFiles(dir) {
   return out;
 }
 function runTar(cwd, args, input, limit = UPLOAD_LIMIT) {
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     const child = spawn("tar", args, { cwd, env: { ...process.env, COPYFILE_DISABLE: "1" }, stdio: ["pipe", "pipe", "pipe"] });
     const chunks = [];
     let size2 = 0;
@@ -7800,7 +7849,7 @@ function runTar(cwd, args, input, limit = UPLOAD_LIMIT) {
     child.on("close", (code3) => {
       if (over2) return reject(new TooLargeError(limit));
       if (code3 !== 0) return reject(new Error(`tar failed: ${err.trim().split("\n").slice(-3).join(" ")}`));
-      resolve6(Buffer.concat(chunks));
+      resolve7(Buffer.concat(chunks));
     });
     child.stdin.on("error", () => void 0);
     child.stdin.end(input ?? "");
@@ -7811,10 +7860,10 @@ async function packProject(dir, limit = UPLOAD_LIMIT) {
     const tracked = new Set(git(dir, ["ls-files", "-c", "-z"]).stdout.split("\0"));
     const all = gitFiles(dir).filter((f) => !f.startsWith(".airgate/"));
     const skipped2 = all.filter((f) => (isEnvFile(f) || f.split("/").pop() === ".envrc") && !tracked.has(f));
-    const files = all.filter((f) => !skipped2.includes(f));
-    if (!files.length) throw new Error("no files to send (git sees nothing tracked or untracked here)");
-    const archive2 = await runTar(dir, ["--null", "-T", "-", "-czf", "-"], files.join("\0") + "\0", limit);
-    return { archive: archive2, files: files.length, git: true, skipped: skipped2 };
+    const files2 = all.filter((f) => !skipped2.includes(f));
+    if (!files2.length) throw new Error("no files to send (git sees nothing tracked or untracked here)");
+    const archive2 = await runTar(dir, ["--null", "-T", "-", "-czf", "-"], files2.join("\0") + "\0", limit);
+    return { archive: archive2, files: files2.length, git: true, skipped: skipped2 };
   }
   const skipped = readdirSync(dir).filter((f) => isEnvFile(f) || f === ".envrc");
   const archive = await runTar(dir, ["--exclude=node_modules", "--exclude=.git", "--exclude=.airgate", ...ENV_EXCLUDES, "-czf", "-", "."], null, limit);
@@ -7895,7 +7944,7 @@ function firstLine(file) {
   }
 }
 function codexRollouts(root, limit = 3e3) {
-  const files = [];
+  const files2 = [];
   const walk = (d, depth) => {
     let list2 = [];
     try {
@@ -7906,11 +7955,11 @@ function codexRollouts(root, limit = 3e3) {
     for (const x of list2) {
       const full = join3(d, x.name);
       if (x.isDirectory() && depth < 4) walk(full, depth + 1);
-      else if (x.isFile() && /^rollout-.*\.jsonl$/.test(x.name)) files.push({ f: full, m: statSync(full).mtimeMs });
+      else if (x.isFile() && /^rollout-.*\.jsonl$/.test(x.name)) files2.push({ f: full, m: statSync(full).mtimeMs });
     }
   };
   walk(join3(root, "sessions"), 0);
-  return files.sort((a, b2) => b2.m - a.m).slice(0, limit).map((x) => x.f);
+  return files2.sort((a, b2) => b2.m - a.m).slice(0, limit).map((x) => x.f);
 }
 var codexId = (file) => /([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/.exec(file)?.[1] ?? null;
 function findCodexSession(home, projectDir, id, env = {}) {
@@ -8161,8 +8210,8 @@ function rewritePaths(text2, pre) {
   }
   return lines.join("\n");
 }
-function orderFiles(files) {
-  return [...files.filter((f) => f.risky), ...files.filter((f) => !f.risky)];
+function orderFiles(files2) {
+  return [...files2.filter((f) => f.risky), ...files2.filter((f) => !f.risky)];
 }
 function refusals(blocks) {
   const out = [];
@@ -8416,9 +8465,9 @@ function printSessions(ctx, list2) {
 function printFiles(ctx, blocks, toErr) {
   const line2 = toErr ? ctx.ui.err : ctx.ui.out;
   const c = toErr ? ctx.ui.ce : ctx.ui.c;
-  const files = orderFiles(blocks.map((b2) => b2.file));
-  const width = Math.max(...files.map((f) => f.path.length + (f.from ? f.from.length + 4 : 0)));
-  for (const f of files) {
+  const files2 = orderFiles(blocks.map((b2) => b2.file));
+  const width = Math.max(...files2.map((f) => f.path.length + (f.from ? f.from.length + 4 : 0)));
+  for (const f of files2) {
     const name = f.from ? `${f.from} \u2192 ${f.path}` : f.path;
     const mark = f.risky ? c("warn", "!") : " ";
     line2(`  ${mark} ${STATUS_MARK[f.status]} ${f.risky ? name.padEnd(width) + "  " + c("warn", f.reason ?? "") : name}`.trimEnd());
@@ -8469,9 +8518,9 @@ var down2 = {
     const { blocks, outside } = selectProject(parsePatch(d.patch), prefix);
     const refused = refusals(blocks);
     const patch = blocks.map((b2) => b2.text).join("");
-    const files = orderFiles(blocks.map((b2) => b2.file));
+    const files2 = orderFiles(blocks.map((b2) => b2.file));
     if (ctx.json && (dry || !blocks.length)) {
-      return ui2.json({ pod: pod.id, base, files, outside, refused, patch, applied: false });
+      return ui2.json({ pod: pod.id, base, files: files2, outside, refused, patch, applied: false });
     }
     const takeSessions = !dry && !bool(ctx.args, "no-session") && found?.state.podId === pod.id;
     if (!blocks.length) {
@@ -8480,8 +8529,8 @@ var down2 = {
       if (takeSessions && found) await downSessions(ctx, found.root, found.state, pod);
       return;
     }
-    const risky = files.filter((f) => f.risky).length;
-    const head = `${files.length} file(s) from ${pod.spec.name}${risky ? `, ${risky} risky` : ""}:`;
+    const risky = files2.filter((f) => f.risky).length;
+    const head = `${files2.length} file(s) from ${pod.spec.name}${risky ? `, ${risky} risky` : ""}:`;
     if (dry) {
       ui2.err(head);
       printFiles(ctx, blocks, true);
@@ -8516,7 +8565,7 @@ var down2 = {
       throw new CliError(`the patch doesn't apply here, nothing changed:
 ${check.stderr.trim()}`, "commit or stash local edits to those files, or look with: airgate down --dry-run");
     }
-    if (!await confirm(ctx, `apply ${files.length} file(s)${risky ? ` (${risky} risky)` : ""}?`)) throw new CliError("nothing applied");
+    if (!await confirm(ctx, `apply ${files2.length} file(s)${risky ? ` (${risky} risky)` : ""}?`)) throw new CliError("nothing applied");
     const applied = git(top, ["apply", ...applyArgs], patch);
     if (applied.status !== 0) throw new CliError(`git apply failed: ${applied.stderr.trim()}`);
     let acked = true;
@@ -8526,8 +8575,8 @@ ${check.stderr.trim()}`, "commit or stash local edits to those files, or look wi
       acked = false;
     }
     const convo = takeSessions && found ? await downSessions(ctx, found.root, found.state, pod, true) : [];
-    if (ctx.json) return ui2.json({ pod: pod.id, base, files, outside, refused, applied: true, acked, sessions: convo });
-    ui2.out(`${ui2.c("ok", "down")}: applied ${files.length} file(s). review: git status \xB7 git diff`);
+    if (ctx.json) return ui2.json({ pod: pod.id, base, files: files2, outside, refused, applied: true, acked, sessions: convo });
+    ui2.out(`${ui2.c("ok", "down")}: applied ${files2.length} file(s). review: git status \xB7 git diff`);
     if (!acked) ui2.err(ui2.ce("warn", "couldn't tell the pod what was taken; the next down will show these again"));
     printSessions(ctx, convo);
   }
@@ -8588,7 +8637,7 @@ var LineReader = class {
   }
 };
 function ttyPrompt(stdin, out) {
-  return (question, opts2 = {}) => new Promise((resolve6, reject) => {
+  return (question, opts2 = {}) => new Promise((resolve7, reject) => {
     out.write(question);
     const decoder = new StringDecoder2("utf8");
     let answer = "";
@@ -8601,7 +8650,7 @@ function ttyPrompt(stdin, out) {
       stdin.pause();
       out.write("\n");
       if (err) reject(err);
-      else resolve6(answer);
+      else resolve7(answer);
     };
     const onData = (d) => {
       for (const ch of decoder.write(d)) {
@@ -8628,16 +8677,16 @@ function ttyPrompt(stdin, out) {
 }
 function openInBrowser(url) {
   const [cmd, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", '""', url]] : ["xdg-open", [url]];
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     try {
       const child = spawn2(cmd, args, { stdio: "ignore", detached: true });
-      child.on("error", () => resolve6(false));
+      child.on("error", () => resolve7(false));
       child.on("spawn", () => {
         child.unref();
-        resolve6(true);
+        resolve7(true);
       });
     } catch {
-      resolve6(false);
+      resolve7(false);
     }
   });
 }
@@ -9213,20 +9262,20 @@ When you are done, leave your changes in the files there (no need to commit or p
         ui2.err(ui2.ce("bad", keepNote(`the task finished, but its changes didn't come back: ${why}`)));
         return 1;
       }
-      const files = result.files ?? [];
+      const files2 = result.files ?? [];
       const keep = noApply || bool(ctx.args, "keep");
       await finish(ctx, pod, keep ? "sleep" : "destroy");
       if (!keep) restoreState();
-      if (ctx.json) return out({ applied: !noApply && files.length > 0, files, ...noApply ? { patch: result.patch ?? "" } : {}, pod_state: keep ? "sleeping" : "deleted" });
+      if (ctx.json) return out({ applied: !noApply && files2.length > 0, files: files2, ...noApply ? { patch: result.patch ?? "" } : {}, pod_state: keep ? "sleeping" : "deleted" });
       ctx.io.stdout.write(r.log.endsWith("\n") || !r.log ? r.log : r.log + "\n");
       if (noApply) {
         ctx.io.stdout.write(result.patch ?? "");
-        ui2.err(`${files.length} file(s) changed, not applied. apply: airgate down --pod ${name} \xB7 delete the pod: airgate destroy ${name}`);
+        ui2.err(`${files2.length} file(s) changed, not applied. apply: airgate down --pod ${name} \xB7 delete the pod: airgate destroy ${name}`);
         return 0;
       }
-      const risky = files.filter((f) => f.risky).length;
+      const risky = files2.filter((f) => f.risky).length;
       ui2.out(
-        `${ui2.c("ok", "done")}: ${files.length ? `${files.length} file(s) changed here${risky ? `, ${risky} risky` : ""}. review: git status \xB7 git diff` : "no changes came back"}` + (keep ? ` \xB7 the pod is kept (asleep): ${name}` : " \xB7 the pod is deleted")
+        `${ui2.c("ok", "done")}: ${files2.length ? `${files2.length} file(s) changed here${risky ? `, ${risky} risky` : ""}. review: git status \xB7 git diff` : "no changes came back"}` + (keep ? ` \xB7 the pod is kept (asleep): ${name}` : " \xB7 the pod is deleted")
       );
       return 0;
     }
@@ -9287,9 +9336,19 @@ var TOOLS = [
       model: s("built-in model: an OpenRouter id, e.g. qwen/qwen3-coder"),
       repo: s("GitHub repo to clone, owner/name"),
       browser: b("add Chromium + Playwright the agent can drive"),
-      jobs: { type: "array", items: jobSchema, description: "autopilot: scheduled jobs" }
+      jobs: { type: "array", items: jobSchema, description: "autopilot: scheduled jobs" },
+      fromSnapshot: s("start from a saved snapshot (its name, or a share code): its workspace and settings")
     }),
     async call(ctx, a) {
+      if (typeof a.fromSnapshot === "string" && a.fromSnapshot) {
+        const o = {};
+        if (typeof a.name === "string" && a.name) o.name = a.name;
+        if (typeof a.agent === "string" && a.agent) o.agent = a.agent;
+        if (a.browser === true) o.browser = true;
+        const pod2 = await waitReady(ctx, await ctx.api.launchSnapshot(a.fromSnapshot, o));
+        OWN.set(pod2.id, "launch");
+        return { name: pod2.spec.name, id: pod2.id, state: pod2.state, spec: pod2.spec };
+      }
       const argv = [];
       const opt = (flag, v) => typeof v === "string" && v && argv.push(`--${flag}`, v);
       opt("name", a.name);
@@ -9520,6 +9579,62 @@ var TOOLS = [
       return { deleted: p.spec.name, id: p.id };
     }
   },
+  {
+    name: "pod_files",
+    description: "List a folder of a pod's workspace (path relative to ~/workspace; '' for the top), live or at a checkpoint. Looking at a checkpoint never rewinds the pod.",
+    inputSchema: obj({ pod: POD, path: s("folder inside the workspace (default: the top)"), checkpoint: s("a checkpoint id or label (default: the live workspace)") }, ["pod"]),
+    async call(ctx, a) {
+      const p = await resolvePod(ctx, need(a, "pod"));
+      const cp = typeof a.checkpoint === "string" && a.checkpoint ? resolveCheckpoint(await ctx.api.checkpoints(p.id), a.checkpoint).id : void 0;
+      return ctx.api.files(p.id, typeof a.path === "string" ? a.path : "", cp);
+    }
+  },
+  {
+    name: "pod_file_read",
+    description: "Read one file of a pod's workspace, live or at a checkpoint (e.g. to compare with how it was before). Text up to 256 KB comes back as text; anything else as base64.",
+    inputSchema: obj({ pod: POD, path: s("file inside the workspace"), checkpoint: s("a checkpoint id or label (default: live)") }, ["pod", "path"]),
+    async call(ctx, a) {
+      const p = await resolvePod(ctx, need(a, "pod"));
+      const cp = typeof a.checkpoint === "string" && a.checkpoint ? resolveCheckpoint(await ctx.api.checkpoints(p.id), a.checkpoint).id : void 0;
+      const body = await ctx.api.fileRaw(p.id, need(a, "path"), cp);
+      const text2 = body.toString("utf8");
+      if (body.length <= 256 * 1024 && !text2.includes("\uFFFD") && !body.includes(0)) return { path: a.path, bytes: body.length, text: text2 };
+      return { path: a.path, bytes: body.length, base64: body.length <= 2 * 1024 * 1024 ? body.toString("base64") : void 0, note: body.length > 2 * 1024 * 1024 ? "too big to return here: airgate pull" : void 0 };
+    }
+  },
+  {
+    name: "snapshot_save",
+    description: "Save a pod's workspace (live, or at a checkpoint) as a named snapshot new pods can start from (pod_launch with fromSnapshot). Only files: never secrets, conversations or the masking vault.",
+    inputSchema: obj({ pod: POD, name: s("a name for it"), checkpoint: s("save it as it was at this checkpoint (default: live)") }, ["pod", "name"]),
+    async call(ctx, a) {
+      const p = await resolvePod(ctx, need(a, "pod"));
+      const cp = typeof a.checkpoint === "string" && a.checkpoint ? resolveCheckpoint(await ctx.api.checkpoints(p.id), a.checkpoint).id : void 0;
+      return ctx.api.saveSnapshot(p.id, need(a, "name"), cp);
+    }
+  },
+  {
+    name: "snapshots_list",
+    description: "Your saved snapshots (name, state, which pod they came from, whether shared).",
+    inputSchema: obj({}),
+    async call(ctx) {
+      return ctx.api.snapshots();
+    }
+  },
+  {
+    name: "pod_settings",
+    description: "Change a pod's network after launch (open | allowlist | off, extra allowlist hosts) or switch its AI off/on (aiOff: no model calls at all). Applies immediately. Only when the user asked for it.",
+    inputSchema: obj({ pod: POD, network: s("open | allowlist | off", { enum: ["open", "allowlist", "off"] }), allow: { type: "array", items: { type: "string" }, description: "extra allowlist hosts (replaces the list)" }, aiOff: b("true switches the pod's AI off; false back on") }, ["pod"]),
+    async call(ctx, a) {
+      const p = await resolvePod(ctx, need(a, "pod"));
+      const patch = {};
+      if (typeof a.network === "string") patch.network = a.network;
+      if (Array.isArray(a.allow)) patch.allow = a.allow.map(String);
+      if (typeof a.aiOff === "boolean") patch.aiOff = a.aiOff;
+      if (!Object.keys(patch).length) throw new UsageError("nothing to change: network, allow or aiOff");
+      const pod = await ctx.api.updatePod(p.id, patch);
+      return { name: pod.spec.name, network: pod.spec.network, allow: pod.spec.allow ?? [], aiOff: Boolean(pod.spec.aiOff) };
+    }
+  },
   {
     name: "pod_ports",
     description: "What is listening in a pod (dev servers on ports 1024+) and its preview links.",
@@ -9867,7 +9982,7 @@ var race = {
   async run(ctx) {
     const [ref, cpRef = "current"] = ctx.args.positionals;
     const p = await resolvePod(ctx, ref);
-    const checkpointId = cpRef === "current" ? "current" : resolveCheckpoint(await ctx.api.checkpoints(p.id), cpRef).id;
+    const checkpointId2 = cpRef === "current" ? "current" : resolveCheckpoint(await ctx.api.checkpoints(p.id), cpRef).id;
     const overrides = {};
     const agent = str(ctx.args, "agent");
     if (agent) overrides.agent = agent;
@@ -9875,7 +9990,7 @@ var race = {
     if (name) overrides.name = name;
     let pod;
     try {
-      pod = await ctx.ui.spin(`forking ${p.spec.name}`, async () => waitReady(ctx, await ctx.api.fork(p.id, checkpointId, overrides)));
+      pod = await ctx.ui.spin(`forking ${p.spec.name}`, async () => waitReady(ctx, await ctx.api.fork(p.id, checkpointId2, overrides)));
     } catch (e) {
       if (e instanceof ApiError && e.code === "checkpoint_not_mounted") {
         throw new CliError("that checkpoint can't be read on the provider right now", `race from the live workspace: airgate race ${p.spec.name} current (or rewind first)`);
@@ -9884,7 +9999,7 @@ var race = {
     }
     if (ctx.json) return ctx.ui.json(pod);
     ctx.ui.out(readyLine(ctx, pod));
-    ctx.ui.out(`racing ${p.spec.name} from ${checkpointId === "current" ? "its current state" : `"${cpRef}"`}. compare: airgate down --pod ${pod.spec.name} --dry-run`);
+    ctx.ui.out(`racing ${p.spec.name} from ${checkpointId2 === "current" ? "its current state" : `"${cpRef}"`}. compare: airgate down --pod ${pod.spec.name} --dry-run`);
   }
 };
 
@@ -10148,19 +10263,19 @@ function validateForm(f) {
   return e;
 }
 function formSpec(f, catalog = null) {
-  const network = NETWORK_LIST[f.network];
+  const network2 = NETWORK_LIST[f.network];
   const template = formTemplate(f);
   const spec = {
     name: f.name.trim(),
     agent: AGENT_LIST[f.agent],
     size: SIZE_LIST[f.memory],
     masking: f.mask,
-    network,
+    network: network2,
     autoStopMinutes: null,
     autoCheckpoint: f.undo
   };
   if (f.repo.trim()) spec.repo = f.repo.trim();
-  if (network === "allowlist") spec.allow = DEFAULT_ALLOW2;
+  if (network2 === "allowlist") spec.allow = DEFAULT_ALLOW2;
   if (template !== "code") spec.template = template;
   if (f.browser) spec.browser = true;
   if (template === "autopilot") spec.jobs = [{ cron: formCron(f), task: f.task.trim(), enabled: true }];
@@ -11437,6 +11552,171 @@ var ui = {
   }
 };
 
+// src/commands/workspace.ts
+import { writeFileSync as writeFileSync7, existsSync as existsSync6, statSync as statSync4 } from "node:fs";
+import { basename as basename3, resolve as resolve6 } from "node:path";
+async function checkpointId(ctx, podId, ref) {
+  if (!ref || ref === "current") return void 0;
+  return resolveCheckpoint(await ctx.api.checkpoints(podId), ref).id;
+}
+var files = {
+  name: "files",
+  aliases: ["ls-files"],
+  group: "pods",
+  usage: "<pod> [path] [--at <checkpoint>]",
+  summary: "what's in a pod's workspace, live or at a checkpoint (nothing is rewound)",
+  example: 'airgate files web src --at "#2"',
+  notes: ["--at takes a checkpoint id, its label, or #1 for the newest (airgate checkpoints <pod>). get a file with: airgate pull <pod> <path>"],
+  flags: { at: { type: "string", value: "checkpoint", help: "look at a checkpoint instead of the live workspace" } },
+  async run(ctx) {
+    const [ref, path = ""] = ctx.args.positionals;
+    if (!ref) throw new UsageError("which pod? airgate files <pod> [path]");
+    const pod = await resolvePod(ctx, ref);
+    const at3 = await checkpointId(ctx, pod.id, str(ctx.args, "at"));
+    const r = await ctx.api.files(pod.id, path, at3);
+    if (ctx.json) return ctx.ui.json(r);
+    if (!r.entries.length) return void ctx.ui.out(ctx.ui.c("dim", `${r.path || "~/workspace"} is empty`));
+    ctx.ui.table(
+      r.entries.map((e) => [e.type === "dir" ? `${e.name}/` : e.name, e.type === "dir" ? "" : ctx.ui.c("dim", bytes(e.size))]),
+      { head: [`${pod.spec.name}:~/workspace/${r.path}${at3 ? ` @ ${str(ctx.args, "at")}` : ""}`, ""] }
+    );
+  }
+};
+var pull = {
+  name: "pull",
+  group: "pods",
+  usage: "<pod> <path> [--at <checkpoint>] [-o <file>]",
+  summary: "copy one file from a pod (live or at a checkpoint) to this laptop",
+  example: 'airgate pull web src/app.ts --at "before the refactor"',
+  notes: ["up to 25 MB. without -o it lands in this folder under its own name (never over an existing file unless --force). -o - prints it."],
+  flags: {
+    at: { type: "string", value: "checkpoint", help: "from a checkpoint instead of the live workspace" },
+    out: { type: "string", short: "o", value: "file", help: "where to save it (- prints it)" },
+    force: { type: "boolean", help: "overwrite an existing file" }
+  },
+  async run(ctx) {
+    const [ref, path] = ctx.args.positionals;
+    if (!ref || !path) throw new UsageError("airgate pull <pod> <path>");
+    const pod = await resolvePod(ctx, ref);
+    const at3 = await checkpointId(ctx, pod.id, str(ctx.args, "at"));
+    const body = await ctx.ui.spin(`reading ${path}`, ctx.api.fileRaw(pod.id, path, at3));
+    const out = str(ctx.args, "out") ?? basename3(path);
+    if (out === "-") return void ctx.io.stdout.write(body);
+    const dest = resolve6(ctx.io.cwd, out);
+    if (existsSync6(dest) && !bool(ctx.args, "force")) {
+      if (statSync4(dest).isDirectory()) return void save2(ctx, resolve6(dest, basename3(path)), body);
+      throw new CliError(`${out} exists here`, "pick another name with -o, or --force to overwrite");
+    }
+    save2(ctx, dest, body);
+  }
+};
+function save2(ctx, dest, body) {
+  writeFileSync7(dest, body);
+  if (ctx.json) return ctx.ui.json({ saved: dest, bytes: body.length });
+  ctx.ui.out(`${ctx.ui.c("ok", "saved")} ${dest} (${bytes(body.length)})`);
+}
+var ai = {
+  name: "ai",
+  group: "pods",
+  usage: "<pod> on|off",
+  summary: "switch a pod's AI off (no model calls at all) or back on",
+  example: "airgate ai web off",
+  notes: ["off: airgate refuses the pod's model calls, and on allowlist or off networks the model hosts are closed too (an open network can still reach them directly)."],
+  async run(ctx) {
+    const [ref, state] = ctx.args.positionals;
+    if (!ref || state !== "on" && state !== "off") throw new UsageError("airgate ai <pod> on|off");
+    const pod = await resolvePod(ctx, ref);
+    const p = await ctx.api.updatePod(pod.id, { aiOff: state === "off" });
+    if (ctx.json) return ctx.ui.json(p);
+    ctx.ui.out(state === "off" ? `${ctx.ui.c("warn", "AI off")} for ${p.spec.name}: no model calls.${p.spec.network === "open" ? ctx.ui.c("dim", " (its network is open, so it could still reach a model directly: airgate network " + p.spec.name + " allowlist)") : ""}` : `${ctx.ui.c("ok", "AI on")} for ${p.spec.name}.`);
+  }
+};
+var network = {
+  name: "network",
+  group: "pods",
+  usage: "<pod> [open|allowlist|off] [--allow host,host] [--add host] [--remove host]",
+  summary: "see or change what a pod can reach on the internet, now",
+  example: "airgate network web allowlist --add api.stripe.com",
+  notes: [
+    "allowlist: common package registries and GitHub, plus your hosts; off: only the agent's model and airgate; open: anything.",
+    "the agent's own model and sign-in hosts stay reachable unless its AI is off."
+  ],
+  flags: {
+    allow: { type: "string", value: "hosts", help: "replace the extra hosts (comma separated)" },
+    add: { type: "string", value: "host", help: "add hosts (comma separated)" },
+    remove: { type: "string", value: "host", help: "remove hosts (comma separated)" }
+  },
+  async run(ctx) {
+    const [ref, mode] = ctx.args.positionals;
+    if (!ref) throw new UsageError("airgate network <pod> [open|allowlist|off]");
+    if (mode && !["open", "allowlist", "off"].includes(mode)) throw new UsageError("open, allowlist or off");
+    const pod = await resolvePod(ctx, ref);
+    const list2 = (v) => (v ?? "").split(",").map((h) => h.trim().toLowerCase()).filter(Boolean);
+    let allow = pod.spec.allow ?? [];
+    if (str(ctx.args, "allow") !== void 0) allow = list2(str(ctx.args, "allow"));
+    allow = [.../* @__PURE__ */ new Set([...allow, ...list2(str(ctx.args, "add"))])].filter((h) => !list2(str(ctx.args, "remove")).includes(h));
+    const changed = mode || ["allow", "add", "remove"].some((k) => str(ctx.args, k) !== void 0);
+    const p = changed ? await ctx.api.updatePod(pod.id, { ...mode ? { network: mode } : {}, allow }) : pod;
+    if (ctx.json) return ctx.ui.json({ network: p.spec.network, allow: p.spec.allow ?? [], aiOff: Boolean(p.spec.aiOff) });
+    ctx.ui.out(`${p.spec.name}: ${p.spec.network}${p.spec.network === "allowlist" && (p.spec.allow ?? []).length ? ` + ${(p.spec.allow ?? []).join(", ")}` : ""}${p.spec.aiOff ? ctx.ui.c("warn", " \xB7 AI off") : ""}${changed ? ctx.ui.c("dim", " (applied now)") : ""}`);
+  }
+};
+var snapshot2 = {
+  name: "snapshot",
+  aliases: ["snapshots"],
+  group: "undo \xB7 race",
+  usage: "[<pod> <name> [--at <checkpoint>] | share|unshare|rm <name> | show <code>]",
+  summary: "save a pod as a snapshot new pods start from; share it by code",
+  example: 'airgate snapshot web "clean base"',
+  notes: [
+    'a snapshot is a frozen copy of the workspace (live, or at a checkpoint): it stays when the pod is deleted. start a pod from it: airgate launch --from "<name>" (or a share code).',
+    "only the workspace is copied: never the pod's secrets, its agent's conversations or its masking vault. share gives a code anyone signed in to airgate can launch from; unshare stops it.",
+    "with no arguments: your snapshots."
+  ],
+  flags: { at: { type: "string", value: "checkpoint", help: "save the workspace as it was at a checkpoint" }, yes: { type: "boolean", short: "y", help: "don't ask" } },
+  async run(ctx) {
+    const { ui: ui2 } = ctx;
+    const [a, b2, extra] = ctx.args.positionals;
+    if (extra) throw new UsageError(`unexpected "${extra}" (put names with spaces in quotes)`);
+    if (!a) {
+      const list2 = await ctx.api.snapshots();
+      if (ctx.json) return ui2.json(list2);
+      if (!list2.length) return void ui2.out(ui2.c("dim", "no snapshots yet. save one: airgate snapshot <pod> <name>"));
+      ui2.table(
+        list2.map((s3) => [s3.name, s3.state === "ready" ? ui2.c("ok", "ready") : s3.state === "failed" ? ui2.c("bad", "failed") : ui2.c("warn", "saving"), `from ${s3.from.podName}`, s3.shareCode ? ui2.c("warn", `shared: ${s3.shareCode}`) : ui2.c("dim", "private")]),
+        { head: ["snapshot", "", "", ""] }
+      );
+      return void ui2.out(ui2.c("dim", 'start a pod from one: airgate launch --from "<name>"'));
+    }
+    if (a === "share" || a === "unshare") {
+      if (!b2) throw new UsageError(`airgate snapshot ${a} <name>`);
+      const s3 = await ctx.api.shareSnapshot(b2, a === "share");
+      if (ctx.json) return ui2.json(s3);
+      if (a === "unshare") return void ui2.out(`${s3.name}: private again; its old code no longer works.`);
+      ui2.out(`${s3.name}: share code ${s3.shareCode ?? ""}`);
+      return void ui2.out(ui2.c("dim", `anyone signed in to airgate can start a pod from it: airgate launch --from ${s3.shareCode}. it shares only the workspace files.`));
+    }
+    if (a === "rm" || a === "delete") {
+      if (!b2) throw new UsageError("airgate snapshot rm <name>");
+      if (!await confirm(ctx, `delete the snapshot "${b2}"? pods already started from it keep their files.`)) throw new CliError("nothing deleted");
+      await ctx.api.deleteSnapshot(b2);
+      return ctx.json ? ui2.json({ ok: true }) : void ui2.out(`deleted ${b2}.`);
+    }
+    if (a === "show") {
+      if (!b2) throw new UsageError("airgate snapshot show <code>");
+      const s3 = await ctx.api.sharedSnapshot(b2);
+      if (ctx.json) return ui2.json(s3);
+      return void ui2.out(`${s3.name} \xB7 ${s3.agent} \xB7 ${s3.template}${s3.state !== "ready" ? ` \xB7 ${s3.state}` : ""}. start a pod from it: airgate launch --from ${b2}`);
+    }
+    if (!b2) throw new UsageError("airgate snapshot <pod> <name>  (or: airgate snapshots)");
+    const pod = await resolvePod(ctx, a);
+    const at3 = await checkpointId(ctx, pod.id, str(ctx.args, "at"));
+    const s2 = await ui2.spin(`saving ${pod.spec.name} as "${b2}"`, ctx.api.saveSnapshot(pod.id, b2, at3));
+    if (ctx.json) return ui2.json(s2);
+    ui2.out(`${ui2.c("ok", "saved")} "${s2.name}" from ${pod.spec.name}${at3 ? ` at ${str(ctx.args, "at")}` : ""}. ${ui2.c("dim", `start a pod from it: airgate launch --from "${s2.name}" \xB7 share it: airgate snapshot share "${s2.name}"`)}`);
+  }
+};
+
 // src/cli.ts
 var help = {
   name: "help",
@@ -11493,6 +11773,11 @@ var COMMANDS = [
   runTask,
   models,
   relay,
+  files,
+  pull,
+  snapshot2,
+  ai,
+  network,
   usage,
   plan,
   upgrade,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "airgate",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Give your AI its own computer: the airgate command line.",
   "type": "module",
   "bin": {