airgate 0.2.2 → 0.2.4

package/README.md

@@ -25,7 +25,7 @@ macOS and Linux, Node.js 20.10 or newer.
 airgate login     # approve this terminal in your browser
 airgate           # the full-screen terminal app
 airgate launch    # a new pod
-airgate up        # move the session you're in to a pod; airgate down brings the work back
+airgate up        # move the session you're in to a pod (files, conversation, memory); airgate down brings it back
 airgate help      # every command
 ```
 
@@ -68,7 +68,7 @@ Guide: https://airgate.sh/docs/teams
 ## For your agent
 
 Claude Code or Codex on your laptop can send work to pods on its own: one task in a fresh pod
-with the result back here, or the whole project and conversation up and back.
+with the result back here, or the whole project, conversation and memory up and back.
 
 ```sh
 airgate run "get the failing tests passing"   # a fresh pod; the result comes back as a patch

package/dist/airgate.mjs

@@ -130,6 +130,12 @@ var init_pack = __esm({
 });
 
 // ../sandbox/src/types.ts
+var AIRLOCK_MODES = ["ask", "branches", "off"];
+var AIRLOCK_MODE_INFO = {
+  ask: { name: "ask", line: "everything waits for you: pushes, pull requests, email, deploys, outside calls" },
+  branches: { name: "work branches go through", line: "pushes to work branches go through on their own; main, force pushes, pull requests, email and deploys still wait" },
+  off: { name: "off", line: "everything goes through on its own. it's all still recorded in the airlock, but nothing waits for you" }
+};
 var SIZES = {
   small: { cpu: 8, memoryGb: 4, diskGb: 100 },
   standard: { cpu: 8, memoryGb: 8, diskGb: 100 },
@@ -813,6 +819,9 @@ var Api = class {
   resumeAgentSession(id, body) {
     return this.request("POST", `/v1/pods/${enc(id)}/agent-session/resume`, { body });
   }
+  exportAgentMemory(id, dir) {
+    return this.request("GET", `/v1/pods/${enc(id)}/agent-memory?${new URLSearchParams({ dir })}`);
+  }
   exportAgentSession(id, q) {
     const qs = new URLSearchParams({ agent: q.agent, dir: q.dir, ...q.id ? { id: q.id } : {} });
     return this.request("GET", `/v1/pods/${enc(id)}/agent-session?${qs}`);
@@ -2911,12 +2920,12 @@ function typeIn(src, options) {
     };
   });
 }
-function level(t, period2, mode) {
+function level(t, period2, mode2) {
   const u = mod(t, period2) / period2;
   const ease2 = (k) => smoothstep(0, 1, k);
-  if (mode === "in")
+  if (mode2 === "in")
     return u < 0.4 ? ease2(u / 0.4) : 1;
-  if (mode === "out")
+  if (mode2 === "out")
     return u < 0.6 ? 1 : 1 - ease2((u - 0.6) / 0.4);
   return u < 0.3 ? ease2(u / 0.3) : u < 0.6 ? 1 : u < 0.9 ? 1 - ease2((u - 0.6) / 0.3) : 0;
 }
@@ -2926,7 +2935,7 @@ var MODE_WHAT = { in: "in", out: "out", inout: "in and out" };
 function dissolve(src, options) {
   const o = optionsOf2(options, "dissolve", ["period", "mode", "blob", "edge", "seed"]);
   const period2 = num(o.period, "dissolve.period", 6, "seconds");
-  const mode = choice(o.mode, "dissolve.mode", MODES, "inout");
+  const mode2 = choice(o.mode, "dissolve.mode", MODES, "inout");
   const scale2 = 1 / num(o.blob, "dissolve.blob", 7, "atLeast1");
   const auto = o.edge === void 0;
   const edge = o.edge === "" ? "" : chars2(o.edge, "dissolve.edge", ".:", 1);
@@ -2944,10 +2953,10 @@ function dissolve(src, options) {
     return {
       moves: true,
       period: period2,
-      still: HELD[mode] * period2,
-      what: `dissolving ${MODE_WHAT[mode]}`,
+      still: HELD[mode2] * period2,
+      what: `dissolving ${MODE_WHAT[mode2]}`,
       setup: () => (t, s2, g) => {
-        const k = level(t, period2, mode);
+        const k = level(t, period2, mode2);
         if (k >= 1)
           return copy(s2, g);
         const front = k * (1 + band);
@@ -2968,7 +2977,7 @@ function dissolve(src, options) {
 function fade2(src, options) {
   const o = optionsOf2(options, "fade", ["period", "mode", "ramp"]);
   const period2 = num(o.period, "fade.period", 6, "seconds");
-  const mode = choice(o.mode, "fade.mode", MODES, "inout");
+  const mode2 = choice(o.mode, "fade.mode", MODES, "inout");
   const auto = o.ramp === void 0 || o.ramp === "auto";
   const chars3 = ramp(auto ? "standard" : o.ramp);
   if (chars3[0] !== " ")
@@ -2979,8 +2988,8 @@ function fade2(src, options) {
   return build2("fade", src, o, () => ({
     moves: true,
     period: period2,
-    still: HELD[mode] * period2,
-    what: `fading ${MODE_WHAT[mode]}`,
+    still: HELD[mode2] * period2,
+    what: `fading ${MODE_WHAT[mode2]}`,
     setup: () => {
       const steps = /* @__PURE__ */ new Map();
       const stepsOf = (c) => {
@@ -2993,7 +3002,7 @@ function fade2(src, options) {
         return v;
       };
       return (t, s2, g) => {
-        const k = level(t, period2, mode);
+        const k = level(t, period2, mode2);
         if (k >= 1)
           return copy(s2, g);
         for (let y = 0, i = 0; y < g.rows; y++)
@@ -7067,7 +7076,7 @@ function approvalRows(ctx, items, names) {
     ctx.ui.c(a.state === "pending" ? "warn" : a.state === "denied" || a.state === "failed" ? "bad" : "ok", a.state),
     a.kind,
     names.get(a.podId) ?? (a.requestedBy ? `${a.requestedBy}'s pod` : a.podId),
-    a.summary + (a.requestedBy ? ctx.ui.c("dim", ` \xB7 from ${a.requestedBy}`) : "") + (a.needsApprover && a.state === "pending" && !a.requestedBy ? ctx.ui.c("warn", " \xB7 waits for an approver") : ""),
+    a.summary + (a.auto ? ctx.ui.c("dim", ` \xB7 went through on its own (${a.auto})`) : "") + (a.requestedBy ? ctx.ui.c("dim", ` \xB7 from ${a.requestedBy}`) : "") + (a.needsApprover && a.state === "pending" && !a.requestedBy ? ctx.ui.c("warn", " \xB7 waits for an approver") : ""),
     ago(a.createdAt),
     ctx.ui.c("dim", a.id)
   ]);
@@ -7080,12 +7089,21 @@ var airlock = {
   name: "airlock",
   aliases: ["approvals"],
   group: "airlock \xB7 mask",
-  usage: "[--watch]",
-  summary: "what your pods want to send out: pending first, then recent",
-  example: "airgate airlock --watch",
-  notes: ["--watch follows the live stream and prints each new request as it arrives; ctrl-c to stop."],
-  flags: { watch: { type: "boolean", short: "w", help: "follow new requests" } },
+  usage: "[--watch] | mode [ask|branches|off|account] [--pod p]",
+  summary: "what your pods want to send out: pending first, then recent \xB7 how strict it is",
+  example: "airgate airlock mode branches",
+  notes: [
+    "--watch follows the live stream and prints each new request as it arrives; ctrl-c to stop.",
+    "mode: how much waits for you, like Claude Code's permission modes. ask (the default): everything waits. branches: pushes to work branches go through on their own; main, force pushes, pull requests, email and deploys still wait. off: everything goes through, still recorded.",
+    "mode with --pod sets one pod's own mode (account: back to the account's). a team's approver rules always win."
+  ],
+  flags: {
+    watch: { type: "boolean", short: "w", help: "follow new requests" },
+    pod: { type: "string", value: "pod", help: "with mode: this pod only" }
+  },
   async run(ctx) {
+    if (ctx.args.positionals[0] === "mode") return mode(ctx);
+    if (ctx.args.positionals.length) throw new UsageError("airgate airlock [--watch] | airgate airlock mode [ask|branches|off]");
     if (bool(ctx.args, "watch")) return watch(ctx);
     const [items, names] = await Promise.all([ctx.api.approvals(), podNames(ctx)]);
     const pending = items.filter((a) => a.state === "pending").sort((a, b2) => a.createdAt - b2.createdAt);
@@ -7104,6 +7122,30 @@ var airlock = {
     }
   }
 };
+async function mode(ctx) {
+  const want = ctx.args.positionals[1];
+  const podRef = str(ctx.args, "pod");
+  if (want && !AIRLOCK_MODES.includes(want) && !(podRef && want === "account")) {
+    throw new UsageError(`${AIRLOCK_MODES.join(", ")}${podRef ? " or account" : ""}`, "airgate airlock mode branches");
+  }
+  const account = (await ctx.api.me()).user.airlockMode ?? "ask";
+  const say = (who, m2, own) => {
+    ctx.ui.out(`${who}: ${m2 === "off" ? ctx.ui.c("warn", AIRLOCK_MODE_INFO[m2].name) : AIRLOCK_MODE_INFO[m2].name}${own ? "" : ctx.ui.c("dim", " (the account's)")}`);
+    ctx.ui.out(ctx.ui.c("dim", `  ${AIRLOCK_MODE_INFO[m2].line}`));
+    if (m2 === "off") ctx.ui.err(ctx.ui.ce("warn", "  nothing waits: an agent's push to main, a pull request or an email goes out on its own"));
+  };
+  if (podRef) {
+    let pod = await resolvePod(ctx, podRef);
+    if (want) pod = await ctx.api.updatePod(pod.id, { airlock: want === "account" ? null : want });
+    const m2 = pod.spec.airlock ?? account;
+    if (ctx.json) return ctx.ui.json({ pod: pod.spec.name, mode: m2, own: Boolean(pod.spec.airlock) });
+    return say(pod.spec.name, m2, Boolean(pod.spec.airlock));
+  }
+  const m = want ? (await ctx.api.updateMe({ airlockMode: want })).user.airlockMode ?? want : account;
+  if (ctx.json) return ctx.ui.json({ mode: m });
+  say("airlock", m, true);
+  if (!want) ctx.ui.out(ctx.ui.c("dim", `  change it: airgate airlock mode ${AIRLOCK_MODES.join("|")} \xB7 one pod: --pod <p>`));
+}
 async function watch(ctx) {
   const seen = /* @__PURE__ */ new Set();
   let first = true;
@@ -7559,7 +7601,7 @@ import { rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { resolve as resolve4 } from "node:path";
 
 // src/version.ts
-var VERSION = "0.2.2";
+var VERSION = "0.2.4";
 
 // src/commands/team.ts
 async function checkSimilar(ctx, task2) {
@@ -8133,6 +8175,7 @@ var launch = {
     env: { type: "string", value: "file", help: "a .env file: its keys become this pod's secrets before it boots" },
     "public-repo": { type: "boolean", help: "the repo is public: don't check it against your GitHub App" },
     mask: { type: "boolean", default: true, help: "mask model traffic (--no-mask to turn off)" },
+    airlock: { type: "string", value: "mode", choices: AIRLOCK_MODES, help: "this pod's airlock: ask | branches | off (default: your account's, see airgate airlock mode)" },
     undo: { type: "boolean", default: true, help: "checkpoint after every agent step (--no-undo to turn off)" },
     network: { type: "string", value: "policy", choices: NETWORK_NAMES, default: "allowlist", help: "allowlist | open | off" },
     allow: { type: "list", value: "host", help: "extra hosts for the allowlist (repeatable, or comma-separated)" },
@@ -8252,6 +8295,8 @@ function specFromFlags(ctx, defaults = {}) {
   if (jobs2.length) spec.jobs = jobs2;
   if (builtin) spec.builtinModel = true;
   if (builtin && model) spec.model = model;
+  const airlockMode = str(a, "airlock");
+  if (airlockMode) spec.airlock = airlockMode;
   return spec;
 }
 var info = {
@@ -8275,6 +8320,7 @@ var info = {
       ["network", s2.network + (s2.network === "allowlist" && s2.allow?.length ? ` \xB7 ${s2.allow.join(", ")}` : "")],
       ["mask", s2.masking ? `on${s2.maskTerms?.length ? ` \xB7 ${s2.maskTerms.length} terms` : ""}` : ctx.ui.c("warn", "off")],
       ["undo", s2.autoCheckpoint ? "auto checkpoints" : "manual only"],
+      ["airlock", s2.airlock ? s2.airlock === "off" ? ctx.ui.c("warn", AIRLOCK_MODE_INFO.off.name) : AIRLOCK_MODE_INFO[s2.airlock].name : "as the account"],
       ["auto-stop", s2.autoStopMinutes === 0 ? "keep awake (never sleeps: every hour counts, ~720 a month)" : `sleeps after ${s2.autoStopMinutes ?? 10} min idle`]
     ];
     if (s2.repo) rows2.push(["repo", s2.repo]);
@@ -8754,6 +8800,79 @@ function bringBack(sent, podContent, now = /* @__PURE__ */ new Date()) {
   atomic(file, body);
   return { agent: sent.agent, id, file, outcome: "new", sha256: sha256(body) };
 }
+var TEXTISH = /\.(md|markdown|txt|json|jsonl|ya?ml|toml)$/i;
+function findClaudeMemory(home, projectDir, env = {}) {
+  for (const p of spellings(projectDir)) {
+    const dir = join3(claudeHome(home, env), "projects", claudeKey(p), "memory");
+    try {
+      if (statSync(dir).isDirectory() && listFiles(dir).length) return dir;
+    } catch {
+    }
+  }
+  return null;
+}
+function listFiles(dir, rel = "") {
+  const out = [];
+  for (const x of readdirSync2(join3(dir, rel), { withFileTypes: true })) {
+    const r = rel ? `${rel}/${x.name}` : x.name;
+    if (x.isDirectory()) out.push(...listFiles(dir, r));
+    else if (x.isFile()) out.push(r);
+  }
+  return out;
+}
+async function packMemory(dir, projectDir, podPath, limit = UPLOAD_LIMIT) {
+  const froms = spellings(projectDir);
+  const stage = mkdtempSync(join3(tmpdir(), "airgate-memory-"));
+  try {
+    const files2 = {};
+    for (const rel of listFiles(dir)) {
+      const body = readFileSync4(join3(dir, rel));
+      files2[rel] = sha256(body);
+      const out = join3(stage, "memory", rel);
+      mkdirSync2(dirname(out), { recursive: true });
+      writeFileSync3(out, TEXTISH.test(rel) ? rewriteAll(body.toString("utf8"), froms, podPath) : body);
+    }
+    const archive = await runTar(stage, ["-czf", "-", "memory"], null, limit);
+    return { podDir: `.claude/projects/${claudeKey(podPath)}`, archive, sent: { dir, localPath: projectDir, podPath, files: files2 }, count: Object.keys(files2).length };
+  } finally {
+    rmSync3(stage, { recursive: true, force: true });
+  }
+}
+function bringBackMemory(sent, pod) {
+  const out = { added: [], updated: [], conflicts: [], sent: { ...sent, files: { ...sent.files } } };
+  const write2 = (file, body) => {
+    mkdirSync2(dirname(file), { recursive: true });
+    const tmp = `${file}.airgate-${process.pid}`;
+    writeFileSync3(tmp, body, { mode: 384 });
+    renameSync2(tmp, file);
+  };
+  for (const f of pod) {
+    const rel = f.path.replace(/\\/g, "/");
+    if (!rel || rel.startsWith("/") || rel.split("/").some((p) => p === ".." || p === "")) continue;
+    const body = TEXTISH.test(rel) ? Buffer.from(rewritePath(f.body.toString("utf8"), sent.podPath, sent.localPath)) : f.body;
+    const file = join3(sent.dir, rel);
+    const local = existsSync2(file) ? readFileSync4(file) : null;
+    if (local && local.equals(body)) {
+      out.sent.files[rel] = sha256(local);
+      continue;
+    }
+    if (!local) {
+      write2(file, body);
+      out.added.push(rel);
+      out.sent.files[rel] = sha256(body);
+    } else if (sent.files[rel] && sha256(local) === sent.files[rel]) {
+      write2(file, body);
+      out.updated.push(rel);
+      out.sent.files[rel] = sha256(body);
+    } else {
+      const dot = rel.lastIndexOf(".");
+      const savedAs = dot > rel.lastIndexOf("/") ? `${rel.slice(0, dot)}.from-pod${rel.slice(dot)}` : `${rel}.from-pod`;
+      write2(join3(sent.dir, savedAs), body);
+      out.conflicts.push({ file: rel, savedAs });
+    }
+  }
+  return out;
+}
 
 // src/patch.ts
 var RULES2 = [
@@ -8963,7 +9082,7 @@ function podDirName(projectDir) {
 var up = {
   name: "up",
   group: "up \xB7 down",
-  usage: "[dir] [--pod p] [--agent a] [--with-config] [--env [.env]] [--session id | --no-session]",
+  usage: "[dir] [--pod p] [--agent a] [--with-config] [--env [.env]] [--session id | --no-session] [--no-memory]",
   summary: "move this project (with uncommitted work) into a pod",
   example: "airgate up --with-config",
   notes: [
@@ -8972,6 +9091,7 @@ var up = {
     "--with-config also sends ~/.claude settings.json, CLAUDE.md, skills/, agents/, commands/ (never credentials).",
     "remembers the pod in .airgate/state.json (kept out of git via .git/info/exclude) so `airgate down` knows where to look.",
     "also sends your latest Claude Code / Codex conversation in this directory and resumes it in the pod (paths rewritten); --no-session to skip, --session <id> to pick one. dropped with a warning if it is over the size limit.",
+    "and Claude Code's memory for this project (~/.claude/projects/<project>/memory); --no-memory to skip. down brings new and changed memories back, never overwriting one you changed here.",
     "--env [file] sends the keys of a dotenv file (default .env) as secrets of that pod; the names sent are listed."
   ],
   flags: {
@@ -8983,6 +9103,7 @@ var up = {
     env: { type: "string", value: "file", implicit: ".env", help: "send a dotenv file's keys as this pod's secrets (default .env)" },
     session: { type: "string", value: "id", help: "send this Claude Code / Codex conversation (default: the latest here)" },
     "no-session": { type: "boolean", help: "don't send the agent conversation" },
+    "no-memory": { type: "boolean", help: "don't send Claude Code's memory for this project" },
     yes: { type: "boolean", short: "y", help: "don't ask" }
   },
   async run(ctx) {
@@ -9026,6 +9147,16 @@ var up = {
       for (const f of [findClaudeSession(home, projectDir, sessionId, ctx.io.env), findCodexSession(home, projectDir, sessionId, ctx.io.env)]) if (f) found.push(f);
       if (sessionId && !found.length) throw new CliError(`no Claude Code or Codex session ${sessionId} for ${projectDir}`, "leave out --session to take the latest one");
     }
+    let memory2 = null;
+    const memDir = bool(ctx.args, "no-memory") ? null : findClaudeMemory(home, projectDir, ctx.io.env);
+    if (memDir) {
+      try {
+        memory2 = await packMemory(memDir, projectDir, podPath);
+      } catch (e) {
+        if (!(e instanceof TooLargeError)) throw e;
+        ui2.err(ui2.ce("warn", `Claude Code's memory for this project is over ${bytes(UPLOAD_LIMIT)} packed: not sent`));
+      }
+    }
     const sessions = [];
     for (const f of found) {
       try {
@@ -9072,6 +9203,15 @@ var up = {
     let envSent = null;
     const envFile = str(ctx.args, "env");
     if (envFile) envSent = await ui2.spin(`sending ${envFile} as secrets`, sendDotenv(ctx, envFile, pod.id));
+    let memorySent;
+    if (memory2) {
+      try {
+        await ui2.spin(`sending Claude Code's memory (${memory2.count} file${memory2.count === 1 ? "" : "s"})`, ctx.api.upload(pod.id, memory2.podDir, memory2.archive));
+        memorySent = memory2.sent;
+      } catch (e) {
+        ui2.err(ui2.ce("warn", `couldn't send the memory: ${e.message}`));
+      }
+    }
     const sent = [];
     const resumed = [];
     for (const p of sessions) {
@@ -9101,7 +9241,7 @@ var up = {
     } catch {
       based = false;
     }
-    const state = { gateway: ctx.cfg.gateway, podId: pod.id, podName: pod.spec.name, dir: podDir, at: Date.now(), ...sent.length ? { sessions: sent } : {} };
+    const state = { gateway: ctx.cfg.gateway, podId: pod.id, podName: pod.spec.name, dir: podDir, at: Date.now(), ...sent.length ? { sessions: sent } : {}, ...memorySent ? { memory: memorySent } : {} };
     writeState(projectDir, state);
     if (ctx.json) {
       return ui2.json({ pod, dir: podDir, bytes: packed.archive.length, files: packed.files, skipped: packed.skipped, config: config?.parts ?? [], baseSet: based, sessions: resumed, secrets: envSent });
@@ -9114,6 +9254,7 @@ var up = {
       ui2.out(`secrets for ${pod.spec.name}: ${envSent.sent.length ? envSent.sent.join(", ") : "none"}${envSent.skipped.length ? ui2.c("dim", ` (skipped: ${envSent.skipped.join(", ")})`) : ""}`);
       for (const f of envSent.failed) ui2.err(ui2.ce("warn", `not sent: ${f}`));
     }
+    if (memorySent) ui2.out(`memory: ${Object.keys(memorySent.files).length} file(s) of Claude Code's memory for this project`);
     for (const r of resumed) {
       ui2.out(`conversation: ${r.command}${r.running ? ui2.c("dim", ` \xB7 resuming in the pod (cd ~/${podDir})`) : ui2.c("dim", ` \xB7 sent; in the pod: cd ~/${podDir} && ${r.command}`)}`);
     }
@@ -9138,8 +9279,35 @@ async function downSessions(ctx, root, state, pod, quiet2 = false) {
     }
   }
   if (state.sessions?.length) writeState(root, { ...state, sessions: next });
-  if (!quiet2 && !ctx.json) printSessions(ctx, out);
-  return out;
+  let memory2 = null;
+  if (state.memory) {
+    try {
+      const x = await ctx.api.exportAgentMemory(pod.id, state.dir);
+      memory2 = bringBackMemory(state.memory, x.files.map((f) => ({ path: f.path, body: Buffer.from(f.b64, "base64") })));
+      writeState(root, { ...readState(root, state), memory: memory2.sent });
+    } catch (e) {
+      if (!(e instanceof ApiError && e.status === 404)) ctx.ui.err(ctx.ui.ce("warn", `couldn't bring Claude Code's memory back: ${e.message}`));
+    }
+  }
+  if (!quiet2 && !ctx.json) {
+    printSessions(ctx, out);
+    printMemory(ctx, memory2);
+  }
+  return { convo: out, memory: memory2 };
+}
+function readState(root, fallback) {
+  try {
+    return JSON.parse(readFileSync5(statePath(root), "utf8"));
+  } catch {
+    return fallback;
+  }
+}
+function printMemory(ctx, m) {
+  if (!m) return;
+  const n2 = m.added.length + m.updated.length;
+  if (!n2 && !m.conflicts.length) return ctx.ui.out(ctx.ui.c("dim", "memory: nothing new in the pod"));
+  if (n2) ctx.ui.out(`memory: ${[m.added.length ? `${m.added.length} new` : "", m.updated.length ? `${m.updated.length} updated` : ""].filter(Boolean).join(", ")} from the pod`);
+  for (const c of m.conflicts) ctx.ui.out(`memory: ${c.file} changed here and in the pod; yours kept, the pod's saved as ${c.savedAs}`);
 }
 function printSessions(ctx, list2) {
   for (const r of list2) {
@@ -9261,11 +9429,13 @@ ${check.stderr.trim()}`, "commit or stash local edits to those files, or look wi
     } catch {
       acked = false;
     }
-    const convo = takeSessions && found ? await downSessions(ctx, found.root, found.state, pod, true) : [];
-    if (ctx.json) return ui2.json({ pod: pod.id, base, files: files2, outside, refused, applied: true, acked, sessions: convo });
+    const back = takeSessions && found ? await downSessions(ctx, found.root, found.state, pod, true) : { convo: [], memory: null };
+    const convo = back.convo;
+    if (ctx.json) return ui2.json({ pod: pod.id, base, files: files2, outside, refused, applied: true, acked, sessions: convo, memory: back.memory && { added: back.memory.added, updated: back.memory.updated, conflicts: back.memory.conflicts } });
     ui2.out(`${ui2.c("ok", "down")}: applied ${files2.length} file(s). review: git status \xB7 git diff`);
     if (!acked) ui2.err(ui2.ce("warn", "couldn't tell the pod what was taken; the next down will show these again"));
     printSessions(ctx, convo);
+    printMemory(ctx, back.memory);
   }
 };
 
@@ -10404,7 +10574,7 @@ var TOOLS = [
   },
   {
     name: "pod_down",
-    description: "Apply a pod\u2019s work to the local repo as a git patch, with the CLI\u2019s safety checks (refuses symlinks and paths outside the repo; all or nothing). Look with pod_diff first and tell the user about risky files.",
+    description: "Apply a pod\u2019s work to the local repo as a git patch (and bring back the conversation and Claude Code\u2019s memory that up sent), with the CLI\u2019s safety checks (refuses symlinks and paths outside the repo; all or nothing). Look with pod_diff first and tell the user about risky files.",
     inputSchema: obj({ pod: s("pod name or id (default: the pod from airgate up in dir)"), dir: s("the local project directory (default: where the server started)") }),
     async call(ctx, a) {
       const argv = ["--yes"];
@@ -10447,7 +10617,7 @@ var TOOLS = [
   },
   {
     name: "pod_up",
-    description: "Move the local project into a pod: its files (git-tracked and untracked-but-not-ignored), and by default the latest Claude Code / Codex conversation here, which resumes in the pod. Launches a new pod named after the folder unless pod is given. Bring the work back later with pod_diff / pod_down.",
+    description: "Move the local project into a pod: its files (git-tracked and untracked-but-not-ignored), and by default the latest Claude Code / Codex conversation here, which resumes in the pod, plus Claude Code\u2019s memory for the project. Launches a new pod named after the folder unless pod is given. Bring the work back later with pod_diff / pod_down.",
     inputSchema: obj({
       dir: s("the local project directory (default: where the server started)"),
       pod: s("send into this existing pod instead of launching one"),
@@ -10548,17 +10718,18 @@ var TOOLS = [
   },
   {
     name: "pod_settings",
-    description: "Change a pod's network after launch (open | allowlist | off, extra allowlist hosts) or switch its AI off/on (aiOff: no model calls at all). Applies immediately. Only when the user asked for it.",
-    inputSchema: obj({ pod: POD, network: s("open | allowlist | off", { enum: ["open", "allowlist", "off"] }), allow: { type: "array", items: { type: "string" }, description: "extra allowlist hosts (replaces the list)" }, aiOff: b("true switches the pod's AI off; false back on") }, ["pod"]),
+    description: "Change a pod's network after launch (open | allowlist | off, extra allowlist hosts), switch its AI off/on (aiOff: no model calls at all), or set its airlock (ask | branches | off | account). Applies immediately. Only when the user asked for it; never loosen the airlock on your own.",
+    inputSchema: obj({ pod: POD, network: s("open | allowlist | off", { enum: ["open", "allowlist", "off"] }), allow: { type: "array", items: { type: "string" }, description: "extra allowlist hosts (replaces the list)" }, aiOff: b("true switches the pod's AI off; false back on"), airlock: s("ask (everything waits) | branches (pushes to work branches go through) | off (nothing waits) | account (the account's mode)", { enum: ["ask", "branches", "off", "account"] }) }, ["pod"]),
     async call(ctx, a) {
       const p = await resolvePod(ctx, need(a, "pod"));
       const patch = {};
       if (typeof a.network === "string") patch.network = a.network;
       if (Array.isArray(a.allow)) patch.allow = a.allow.map(String);
       if (typeof a.aiOff === "boolean") patch.aiOff = a.aiOff;
-      if (!Object.keys(patch).length) throw new UsageError("nothing to change: network, allow or aiOff");
+      if (typeof a.airlock === "string") patch.airlock = a.airlock === "account" ? null : a.airlock;
+      if (!Object.keys(patch).length) throw new UsageError("nothing to change: network, allow, aiOff or airlock");
       const pod = await ctx.api.updatePod(p.id, patch);
-      return { name: pod.spec.name, network: pod.spec.network, allow: pod.spec.allow ?? [], aiOff: Boolean(pod.spec.aiOff) };
+      return { name: pod.spec.name, network: pod.spec.network, allow: pod.spec.allow ?? [], aiOff: Boolean(pod.spec.aiOff), airlock: pod.spec.airlock ?? "account" };
     }
   },
   {
@@ -12763,16 +12934,16 @@ var network = {
     remove: { type: "string", value: "host", help: "remove hosts (comma separated)" }
   },
   async run(ctx) {
-    const [ref, mode] = ctx.args.positionals;
+    const [ref, mode2] = ctx.args.positionals;
     if (!ref) throw new UsageError("airgate network <pod> [open|allowlist|off]");
-    if (mode && !["open", "allowlist", "off"].includes(mode)) throw new UsageError("open, allowlist or off");
+    if (mode2 && !["open", "allowlist", "off"].includes(mode2)) throw new UsageError("open, allowlist or off");
     const pod = await resolvePod(ctx, ref);
     const list2 = (v) => (v ?? "").split(",").map((h) => h.trim().toLowerCase()).filter(Boolean);
     let allow = pod.spec.allow ?? [];
     if (str(ctx.args, "allow") !== void 0) allow = list2(str(ctx.args, "allow"));
     allow = [.../* @__PURE__ */ new Set([...allow, ...list2(str(ctx.args, "add"))])].filter((h) => !list2(str(ctx.args, "remove")).includes(h));
-    const changed = mode || ["allow", "add", "remove"].some((k) => str(ctx.args, k) !== void 0);
-    const p = changed ? await ctx.api.updatePod(pod.id, { ...mode ? { network: mode } : {}, allow }) : pod;
+    const changed = mode2 || ["allow", "add", "remove"].some((k) => str(ctx.args, k) !== void 0);
+    const p = changed ? await ctx.api.updatePod(pod.id, { ...mode2 ? { network: mode2 } : {}, allow }) : pod;
     if (ctx.json) return ctx.ui.json({ network: p.spec.network, allow: p.spec.allow ?? [], aiOff: Boolean(p.spec.aiOff) });
     ctx.ui.out(`${p.spec.name}: ${p.spec.network}${p.spec.network === "allowlist" && (p.spec.allow ?? []).length ? ` + ${(p.spec.allow ?? []).join(", ")}` : ""}${p.spec.aiOff ? ctx.ui.c("warn", " \xB7 AI off") : ""}${changed ? ctx.ui.c("dim", " (applied now)") : ""}`);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "airgate",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "Give your AI its own computer: the airgate command line.",
   "type": "module",
   "bin": {