skydive-cli 0.1.0-beta.89 → 0.1.0-beta.96

package/README.md

@@ -8,10 +8,20 @@ npx skydive-cli --help
 
 ## Authentication
 
-The CLI has two credentials, stored together in `~/.config/skydive/config.json`:
+The CLI has two credentials, stored together in a single `config.json`. The
+location is platform-conventional (resolved via `env-paths`), so it is **not**
+`~/.config/skydive/` everywhere:
 
-- **API key** (`sky_live_…`) for the management commands. Mint one at
-  `skydive.com/account`, then:
+| Platform | Path                                                             |
+| -------- | ---------------------------------------------------------------- |
+| macOS    | `~/Library/Preferences/skydive/config.json`                      |
+| Linux    | `~/.config/skydive/config.json` (or `$XDG_CONFIG_HOME/skydive/`) |
+| Windows  | `%APPDATA%\skydive\config.json`                                  |
+
+`skydive auth status` prints the real resolved path (`Config: …`) — trust that
+over this table if they ever disagree.
+
+- **API key** (`sky_live_…`). Mint one at `skydive.com/account`, then:
 
   ```sh
   skydive auth login            # paste the key
@@ -26,6 +36,12 @@ The CLI has two credentials, stored together in `~/.config/skydive/config.json`:
   skydive auth login --web      # opens the browser, prompts for approval
   ```
 
+Either credential authenticates the management commands (`agents`, `keys`,
+`secrets`): the CLI prefers the API key and falls back to the `--web` chat
+session, so a `--web` login alone is enough to run them — you do **not** need a
+separate API key. The API key is only required when you have no chat session
+(e.g. CI). `skydive chat` requires the chat session specifically.
+
 `skydive auth status` shows both; `skydive auth logout` clears them.
 
 ## Commands
@@ -58,7 +74,7 @@ API key with edit access to that agent.
 ```sh
 skydive secrets list --agent-id <id>              # names only — values are never returned
 skydive secrets set OPENAI_API_KEY --agent-id <id>   # reads the value from stdin
-echo -n "$TOKEN" | skydive secrets set MY_TOKEN --agent-id <id>
+printf '%s' "$TOKEN" | skydive secrets set MY_TOKEN --agent-id <id>
 skydive secrets set MY_TOKEN "literal-value" --agent-id <id>
 skydive secrets rm MY_TOKEN --agent-id <id>
 ```
@@ -67,6 +83,11 @@ skydive secrets rm MY_TOKEN --agent-id <id>
 - `set` reads the value from **stdin** when no value argument is given, so the
   secret stays out of shell history. Passing it inline is supported for
   scripting but avoid it in an interactive shell.
+- Use `printf '%s'` rather than `echo -n` when piping a value: `echo -n` is not
+  portable (some `sh` builtins emit `-n` literally instead of suppressing the
+  newline), which would silently store a corrupted value. Since values are
+  write-only and cannot be read back to verify, that failure stays invisible
+  until something downstream breaks.
 - **Values are write-only over the API.** `list` returns key names, never
   values — the same contract as the in-sandbox `platform secrets` surface.
 - Setting a secret updates the agent's vault. If an outbound-proxy rule
@@ -122,6 +143,17 @@ skydive chat -p "status?" --agent grace --json               # structured envelo
   `SKYDIVE_SESSION_TOKEN`.
 - `--json` prints `{ agentId, agentName, conversationId, isNewConversation,
 runId, text }` instead of streaming the raw text.
+- **Recovering a dropped run.** A long run's stream can be cut off at the edge
+  (a gateway 502/504) after the run was created. The run keeps going
+  server-side, so a blind retry would re-execute the agent. Instead, note the
+  `runId` (always in `--json` output) and fetch the result once it's done:
+
+  ```sh
+  skydive runs get <runId>            # prints the reply; --json for the envelope
+  ```
+
+  `runs get` re-attaches to the run and replays its full reply whether it's
+  still streaming or already finished.
 
 It defaults to the production API (`https://api.skydive.com`). For local
 dev, point it at your stack:
@@ -136,22 +168,62 @@ management API used by `agents`/`keys`.
 
 ### Keybindings
 
-| Context      | Key           | Action                               |
-| ------------ | ------------- | ------------------------------------ |
-| Pickers      | _type_        | filter the list                      |
-| Pickers      | `↑` / `↓`     | move selection                       |
-| Pickers      | `↵`           | open / select                        |
-| Pickers      | `esc`         | back                                 |
-| Agent picker | `ctrl+n`      | create an agent                      |
-| Chat         | `↵`           | send (or queue, while streaming)     |
-| Chat         | `pgup`/`pgdn` | scroll the transcript                |
-| Chat         | `ctrl+c`      | cancel the active run; again to quit |
-| Chat         | `esc`         | back to the conversation picker      |
+| Context             | Key           | Action                                |
+| ------------------- | ------------- | ------------------------------------- |
+| Pickers             | _type_        | filter the list                       |
+| Pickers             | `↑` / `↓`     | move selection                        |
+| Pickers             | `↵`           | open / select                         |
+| Pickers             | `esc`         | back                                  |
+| Agent picker        | `ctrl+n`      | create an agent                       |
+| Agent picker        | `ctrl+w`      | switch workspace                      |
+| Agent picker        | `tab`         | toggle mine / whole-org agents        |
+| Conversation picker | `ctrl+d`      | delete the highlighted conversation   |
+| Chat                | `↵`           | send (or queue, while streaming)      |
+| Chat                | `pgup`/`pgdn` | scroll the transcript                 |
+| Chat                | `ctrl+c`      | cancel the active run; again to quit  |
+| Chat                | `esc`         | back to the conversation picker       |
+| Chat                | `ctrl+p`      | switch model                          |
+| Chat                | `ctrl+o`      | switch theme                          |
+| Chat                | `ctrl+t`      | grant / revoke local machine access   |
+| Chat                | `ctrl+l`      | open this conversation in the browser |
+| Chat                | `ctrl+r`      | run the newest pending connect card   |
+| Chat                | `ctrl+v`      | paste an image from the clipboard     |
+| Chat                | `ctrl+x`      | drop the most recently staged image   |
+| Chat                | `?`           | show the keybinding reference         |
 
 Messages typed while a response is streaming are **queued** and sent in
 order as each run finishes; `ctrl+c` cancels the current run and clears the
 queue.
 
+### Local machine access (`--share-machine` / `ctrl+t`)
+
+The chat TUI can grant the agent the ability to run commands **on your local
+machine** so it can read the repo you launched from, run local tooling, etc.
+This is off by default (default-deny) and you opt in explicitly:
+
+- `skydive chat --share-machine` enables it at launch, or
+- `ctrl+t` toggles it from the chat screen (the status bar shows `local access`
+  when on, `revoke access` when off).
+
+What to know before enabling it:
+
+- **Per-agent.** The grant is scoped to the agent you're chatting with; other
+  agents don't inherit it.
+- **The working directory is a starting point, not a jail.** Commands run with
+  their working directory set to wherever you launched `skydive chat`, but this
+  is **not** a hard filesystem boundary. This is genuine remote command
+  execution (a WebSocket streaming stdin/stdout/stderr), so the agent runs
+  commands as your user and can reach anything your user can, including paths
+  outside the launch directory. Launch from a scoped directory, but treat the
+  grant as "this agent can act as me on this machine," not "this agent can only
+  see this folder."
+- **Teardown is automatic.** Access is revoked when the TUI unmounts, so
+  quitting the chat drops the grant and reaps any processes the agent spawned.
+- **Interactive only.** Machine sharing is **not** available in `-p`
+  (non-interactive) mode \u2014 `--share-machine` has no effect there and the
+  print path carries no portal code. You can have scripted (`-p`) or local
+  access, not both, in a single invocation.
+
 ## Environment variables
 
 | Variable                | Effect                                           |
@@ -160,6 +232,8 @@ queue.
 | `SKYDIVE_API_URL`       | Management API base URL                          |
 | `SKYDIVE_SESSION_TOKEN` | Chat session token (for non-interactive use)     |
 | `SKYDIVE_APP_URL`       | Chat app/session origin (overrides stored value) |
+| `SKYDIVE_THEME`         | Chat colorscheme id (flag `--theme` overrides)   |
+| `SKYDIVE_CONFIG_NAME`   | On-disk config profile name (default `skydive`)  |
 
 ## Testing the TUI
 

package/dist/js/bin.mjs

@@ -13,7 +13,7 @@ import fs from "node:fs";
 import zlib from "node:zlib";
 
 //#region package.json
-var version$1 = "0.1.0-beta.89";
+var version$1 = "0.1.0-beta.96";
 
 //#endregion
 //#region src/types.ts
@@ -2101,7 +2101,7 @@ const chatCommand = {
 			printError(`Unknown theme "${themeId}". Valid themes: ${themes.map((t) => t.id).join(", ")}`);
 			process.exit(1);
 		}
-		const { runChat } = await import("./boot-DTUbLzPt.mjs");
+		const { runChat } = await import("./boot-DRWra2vY.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
@@ -2119,7 +2119,7 @@ async function runPrintMode({ argv, appUrl }) {
 		printError(`${session.error.message} For non-interactive use, run \`skydive auth login --web\` first, or set SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { runPrint, readStdin } = await import("./print-BtMdNPJR.mjs").then((n) => n.t);
+	const { runPrint, readStdin } = await import("./print-CQ8b7JUC.mjs").then((n) => n.t);
 	let prompt = (argv.print ?? "").trim();
 	if (!prompt) {
 		if (process.stdin.isTTY) {
@@ -2218,7 +2218,7 @@ const switchCommand = {
 				printError("The workspace picker needs the Bun runtime and it could not be set up automatically. Pass a workspace slug instead, or install Bun and retry.");
 				process.exit(1);
 			}
-			const { runWorkspacePicker } = await import("./boot-DTUbLzPt.mjs");
+			const { runWorkspacePicker } = await import("./boot-DRWra2vY.mjs");
 			await runWorkspacePicker(session);
 			return;
 		}

package/dist/js/{boot-DTUbLzPt.mjs → boot-DRWra2vY.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { i as createRestClient, n as resolveAgent, r as HttpError } from "./print-BtMdNPJR.mjs";
+import { a as parseExternalOauthConnectParams, c as resolveConnectUrl, d as isRecord, f as HttpError, i as cardActionErrorMessage, l as parseConnectCard, n as resolveAgent, o as parseOauthConnectParams, p as createRestClient, r as MASK_CHAR, s as reconcileMaskedInput, u as errorMessage } from "./print-CQ8b7JUC.mjs";
 import { _ as getSavedTheme, a as noColorRequested, c as themeMode, d as themesForMode, f as getActiveWorkspaceId, g as DEFAULT_APP_URL, h as DEFAULT_API_URL, i as monoTheme, l as themeModeFromColorFgBg, m as setActiveWorkspace, n as applyTheme, o as theme, p as listWorkspaces, r as findTheme, s as themeForMode, t as DEFAULT_THEME_ID, u as themeVersion, v as resolveWebUrl, y as saveTheme } from "./bin.mjs";
 import path, { basename, isAbsolute, join, win32 } from "node:path";
 import { z } from "zod";
@@ -217,19 +217,6 @@ function decodeFrame(frame) {
 	};
 }
 
-//#endregion
-//#region src/chat/util.ts
-/** Narrowing helper for the many `unknown` payloads the chat stream and
-* tool inputs/outputs carry. A type predicate (not an `as` cast), so call
-* sites can read properties without asserting. */
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/** Best-effort message from an unknown thrown value. */
-function errorMessage(err) {
-	return err instanceof Error ? err.message : String(err);
-}
-
 //#endregion
 //#region src/chat/portal/machine.ts
 /**
@@ -3253,107 +3240,6 @@ function formatElapsed(totalSeconds) {
 	return `${Math.floor(minutes / 60)}h ${minutes % 60}m`;
 }
 
-//#endregion
-//#region src/chat/tui/chat/card.ts
-const urlActionKinds = [
-	"open_oauth",
-	"open_external_oauth",
-	"open_github_app",
-	"submit_credential"
-];
-function isUrlActionKind(value) {
-	return typeof value === "string" && urlActionKinds.includes(value);
-}
-function optionalString(value) {
-	return typeof value === "string" && value ? value : null;
-}
-function bindStateKey(props) {
-	const value = props.value;
-	if (!isRecord(value)) return null;
-	const pointer = value.$bindState;
-	if (typeof pointer !== "string") return null;
-	return pointer.startsWith("/") ? pointer.slice(1) : pointer;
-}
-function parseButton(element) {
-	const props = isRecord(element.props) ? element.props : {};
-	const label = optionalString(props.label) ?? "Connect";
-	const on = isRecord(element.on) ? element.on : null;
-	const press = on && isRecord(on.press) ? on.press : null;
-	if (!press) return null;
-	const params = isRecord(press.params) ? press.params : {};
-	const primary = props.variant === "primary";
-	if (press.action === "approve_portal_access") {
-		const agentId = params.agentId;
-		if (typeof agentId !== "string" || !agentId) return null;
-		return {
-			label,
-			action: {
-				kind: "grant_portal",
-				agentId,
-				deviceId: typeof params.deviceId === "string" && params.deviceId ? params.deviceId : null
-			},
-			primary
-		};
-	}
-	if (!isUrlActionKind(press.action)) return null;
-	const url = params.url;
-	if (typeof url !== "string" || !url) return null;
-	return {
-		label,
-		action: {
-			kind: press.action,
-			url
-		},
-		primary
-	};
-}
-function parseConnectCard(spec) {
-	if (!isRecord(spec)) return null;
-	const { root, elements } = spec;
-	if (typeof root !== "string" || !isRecord(elements)) return null;
-	const rootEl = elements[root];
-	if (!isRecord(rootEl) || rootEl.type !== "Card") return null;
-	const rootProps = isRecord(rootEl.props) ? rootEl.props : {};
-	const title = optionalString(rootProps.title);
-	if (!title) return null;
-	const fields = [];
-	const buttons = [];
-	const children = Array.isArray(rootEl.children) ? rootEl.children : [];
-	for (const childId of children) {
-		if (typeof childId !== "string") continue;
-		const el = elements[childId];
-		if (!isRecord(el)) continue;
-		if (el.type === "TextInput" || el.type === "SecretInput") {
-			const props = isRecord(el.props) ? el.props : {};
-			const key = bindStateKey(props);
-			if (!key) continue;
-			fields.push({
-				key,
-				label: optionalString(props.label) ?? key,
-				placeholder: optionalString(props.placeholder),
-				secret: el.type === "SecretInput"
-			});
-			continue;
-		}
-		if (el.type === "Button") {
-			const button = parseButton(el);
-			if (button) buttons.push(button);
-		}
-	}
-	const preferred = buttons.find((b) => b.primary) ?? buttons[0] ?? null;
-	return {
-		title,
-		subtitle: optionalString(rootProps.subtitle),
-		description: optionalString(rootProps.description),
-		fields,
-		button: preferred ? {
-			label: preferred.label,
-			action: preferred.action
-		} : null,
-		state: isRecord(spec.state) ? spec.state : {}
-	};
-}
-
 //#endregion
 //#region src/chat/tui/chat/reducer.ts
 function str(chunk, key) {
@@ -3719,94 +3605,6 @@ function formatModelHint(model) {
 	return `ctrl+p · ${model ?? "default"}`;
 }
 
-//#endregion
-//#region src/chat/tui/chat/card-actions.ts
-function safeUrl(url) {
-	try {
-		return new URL(url, "http://localhost");
-	} catch (_error) {
-		return null;
-	}
-}
-/**
-* Resolve a connect URL to an absolute one the OS can open in a browser.
-*
-* The server builds lazy connect links as server-relative paths (e.g.
-* `/api/v1/oauth/start/slack?connect_session_token=...`). The web client
-* resolves these against its own origin implicitly; the TUI runs outside a
-* browser, so `open()` on a scheme-less path is a silent no-op — the browser
-* never launches and the connect card sits in `launched` forever (the Slack
-* channel-connect deadlock). Resolve against `appUrl` first, mirroring the
-* `open_github_app` / `fulfillCredential` branches, so both the browser we
-* launch and the URL shown on the card are absolute. An already-absolute URL
-* passes through unchanged; if `appUrl` is missing we return the input as-is.
-*/
-function resolveConnectUrl(url, appUrl) {
-	if (!appUrl) return url;
-	try {
-		return new URL(url, appUrl).toString();
-	} catch (_error) {
-		return url;
-	}
-}
-function parseOauthConnectParams(url) {
-	const parsed = safeUrl(url);
-	if (!parsed) return null;
-	const integrationKey = parsed.searchParams.get("integration");
-	const agentId = parsed.searchParams.get("agent_id");
-	const authConfigId = parsed.searchParams.get("auth_config_id");
-	const conversationId = parsed.searchParams.get("conversation_id");
-	if (!integrationKey || !agentId || !authConfigId || !conversationId) return null;
-	return {
-		integrationKey,
-		agentId,
-		authConfigId,
-		conversationId,
-		scopes: parsed.searchParams.get("scopes")
-	};
-}
-function parseExternalOauthConnectParams(url) {
-	const parsed = safeUrl(url);
-	if (!parsed) return null;
-	const agentId = parsed.searchParams.get("agent_id");
-	const conversationId = parsed.searchParams.get("conversation_id");
-	const serverUrl = parsed.searchParams.get("server_url");
-	if (!agentId || !conversationId || !serverUrl) return null;
-	return {
-		agentId,
-		conversationId,
-		serverUrl
-	};
-}
-/**
-* A short human line for a failed card action. Fulfill/connect endpoints
-* return `{ error: string }` bodies (e.g. "already fulfilled") — prefer that
-* over the generic HttpError message.
-*/
-function cardActionErrorMessage(err) {
-	if (err instanceof HttpError) {
-		try {
-			const parsed = JSON.parse(err.body);
-			if (isRecord(parsed) && typeof parsed.error === "string") return parsed.error;
-		} catch (_error) {}
-		return `request failed (HTTP ${err.status})`;
-	}
-	return errorMessage(err);
-}
-const MASK_CHAR = "•";
-/**
-* Recover the real secret from the masked input's displayed text. The input
-* is controlled: after every edit we render bullets, which forces the cursor
-* to the end, so the next edit is always a tail edit — the displayed text is
-* some prefix of the old mask (kept characters) followed by newly typed or
-* pasted plaintext. Characters beyond the retained bullets are the new tail.
-*/
-function reconcileMaskedInput(previousValue, displayed) {
-	let kept = 0;
-	while (kept < displayed.length && kept < previousValue.length && displayed[kept] === MASK_CHAR) kept++;
-	return previousValue.slice(0, kept) + displayed.slice(kept);
-}
-
 //#endregion
 //#region src/chat/notification-preview.ts
 const MAX_NOTIFICATION_PREVIEW_CHARS = 240;

package/dist/js/{print-BtMdNPJR.mjs → print-CQ8b7JUC.mjs}

@@ -348,6 +348,293 @@ const runStreamEventSchema = z.union([z.object({
 })]);
 const streamErrorSchema = z.object({ error: z.string() });
 
+//#endregion
+//#region src/chat/util.ts
+/** Narrowing helper for the many `unknown` payloads the chat stream and
+* tool inputs/outputs carry. A type predicate (not an `as` cast), so call
+* sites can read properties without asserting. */
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Best-effort message from an unknown thrown value. */
+function errorMessage(err) {
+	return err instanceof Error ? err.message : String(err);
+}
+
+//#endregion
+//#region src/chat/tui/chat/card.ts
+const urlActionKinds = [
+	"open_oauth",
+	"open_external_oauth",
+	"open_github_app",
+	"submit_credential"
+];
+function isUrlActionKind(value) {
+	return typeof value === "string" && urlActionKinds.includes(value);
+}
+function optionalString(value) {
+	return typeof value === "string" && value ? value : null;
+}
+function bindStateKey(props) {
+	const value = props.value;
+	if (!isRecord(value)) return null;
+	const pointer = value.$bindState;
+	if (typeof pointer !== "string") return null;
+	return pointer.startsWith("/") ? pointer.slice(1) : pointer;
+}
+function parseButton(element) {
+	const props = isRecord(element.props) ? element.props : {};
+	const label = optionalString(props.label) ?? "Connect";
+	const on = isRecord(element.on) ? element.on : null;
+	const press = on && isRecord(on.press) ? on.press : null;
+	if (!press) return null;
+	const params = isRecord(press.params) ? press.params : {};
+	const primary = props.variant === "primary";
+	if (press.action === "approve_portal_access") {
+		const agentId = params.agentId;
+		if (typeof agentId !== "string" || !agentId) return null;
+		return {
+			label,
+			action: {
+				kind: "grant_portal",
+				agentId,
+				deviceId: typeof params.deviceId === "string" && params.deviceId ? params.deviceId : null
+			},
+			primary
+		};
+	}
+	if (!isUrlActionKind(press.action)) return null;
+	const url = params.url;
+	if (typeof url !== "string" || !url) return null;
+	return {
+		label,
+		action: {
+			kind: press.action,
+			url
+		},
+		primary
+	};
+}
+function parseConnectCard(spec) {
+	if (!isRecord(spec)) return null;
+	const { root, elements } = spec;
+	if (typeof root !== "string" || !isRecord(elements)) return null;
+	const rootEl = elements[root];
+	if (!isRecord(rootEl) || rootEl.type !== "Card") return null;
+	const rootProps = isRecord(rootEl.props) ? rootEl.props : {};
+	const title = optionalString(rootProps.title);
+	if (!title) return null;
+	const fields = [];
+	const buttons = [];
+	const children = Array.isArray(rootEl.children) ? rootEl.children : [];
+	for (const childId of children) {
+		if (typeof childId !== "string") continue;
+		const el = elements[childId];
+		if (!isRecord(el)) continue;
+		if (el.type === "TextInput" || el.type === "SecretInput") {
+			const props = isRecord(el.props) ? el.props : {};
+			const key = bindStateKey(props);
+			if (!key) continue;
+			fields.push({
+				key,
+				label: optionalString(props.label) ?? key,
+				placeholder: optionalString(props.placeholder),
+				secret: el.type === "SecretInput"
+			});
+			continue;
+		}
+		if (el.type === "Button") {
+			const button = parseButton(el);
+			if (button) buttons.push(button);
+		}
+	}
+	const preferred = buttons.find((b) => b.primary) ?? buttons[0] ?? null;
+	return {
+		title,
+		subtitle: optionalString(rootProps.subtitle),
+		description: optionalString(rootProps.description),
+		fields,
+		button: preferred ? {
+			label: preferred.label,
+			action: preferred.action
+		} : null,
+		state: isRecord(spec.state) ? spec.state : {}
+	};
+}
+
+//#endregion
+//#region src/chat/tui/chat/card-actions.ts
+function safeUrl(url) {
+	try {
+		return new URL(url, "http://localhost");
+	} catch (_error) {
+		return null;
+	}
+}
+/**
+* Resolve a connect URL to an absolute one the OS can open in a browser.
+*
+* The server builds lazy connect links as server-relative paths (e.g.
+* `/api/v1/oauth/start/slack?connect_session_token=...`). The web client
+* resolves these against its own origin implicitly; the TUI runs outside a
+* browser, so `open()` on a scheme-less path is a silent no-op — the browser
+* never launches and the connect card sits in `launched` forever (the Slack
+* channel-connect deadlock). Resolve against `appUrl` first, mirroring the
+* `open_github_app` / `fulfillCredential` branches, so both the browser we
+* launch and the URL shown on the card are absolute. An already-absolute URL
+* passes through unchanged; if `appUrl` is missing we return the input as-is.
+*/
+function resolveConnectUrl(url, appUrl) {
+	if (!appUrl) return url;
+	try {
+		return new URL(url, appUrl).toString();
+	} catch (_error) {
+		return url;
+	}
+}
+function parseOauthConnectParams(url) {
+	const parsed = safeUrl(url);
+	if (!parsed) return null;
+	const integrationKey = parsed.searchParams.get("integration");
+	const agentId = parsed.searchParams.get("agent_id");
+	const authConfigId = parsed.searchParams.get("auth_config_id");
+	const conversationId = parsed.searchParams.get("conversation_id");
+	if (!integrationKey || !agentId || !authConfigId || !conversationId) return null;
+	return {
+		integrationKey,
+		agentId,
+		authConfigId,
+		conversationId,
+		scopes: parsed.searchParams.get("scopes")
+	};
+}
+function parseExternalOauthConnectParams(url) {
+	const parsed = safeUrl(url);
+	if (!parsed) return null;
+	const agentId = parsed.searchParams.get("agent_id");
+	const conversationId = parsed.searchParams.get("conversation_id");
+	const serverUrl = parsed.searchParams.get("server_url");
+	if (!agentId || !conversationId || !serverUrl) return null;
+	return {
+		agentId,
+		conversationId,
+		serverUrl
+	};
+}
+/**
+* A short human line for a failed card action. Fulfill/connect endpoints
+* return `{ error: string }` bodies (e.g. "already fulfilled") — prefer that
+* over the generic HttpError message.
+*/
+function cardActionErrorMessage(err) {
+	if (err instanceof HttpError) {
+		try {
+			const parsed = JSON.parse(err.body);
+			if (isRecord(parsed) && typeof parsed.error === "string") return parsed.error;
+		} catch (_error) {}
+		return `request failed (HTTP ${err.status})`;
+	}
+	return errorMessage(err);
+}
+const MASK_CHAR = "•";
+/**
+* Recover the real secret from the masked input's displayed text. The input
+* is controlled: after every edit we render bullets, which forces the cursor
+* to the end, so the next edit is always a tail edit — the displayed text is
+* some prefix of the old mask (kept characters) followed by newly typed or
+* pasted plaintext. Characters beyond the retained bullets are the new tail.
+*/
+function reconcileMaskedInput(previousValue, displayed) {
+	let kept = 0;
+	while (kept < displayed.length && kept < previousValue.length && displayed[kept] === MASK_CHAR) kept++;
+	return previousValue.slice(0, kept) + displayed.slice(kept);
+}
+
+//#endregion
+//#region src/chat/connect-cards.ts
+/**
+* Turn a parsed ConnectCard into the headless summary, resolving any relative
+* connect URL against the app origin so the emitted URL is directly openable.
+*/
+function summarizeConnectCard(card, appUrl) {
+	const base = {
+		title: card.title,
+		subtitle: card.subtitle,
+		description: card.description
+	};
+	const button = card.button;
+	if (!button) return {
+		...base,
+		action: { kind: "unsupported" }
+	};
+	const act = button.action;
+	switch (act.kind) {
+		case "open_oauth":
+		case "open_external_oauth":
+		case "open_github_app": return {
+			...base,
+			action: {
+				kind: "open_url",
+				url: resolveConnectUrl(act.url, appUrl)
+			}
+		};
+		case "submit_credential": return {
+			...base,
+			action: {
+				kind: "submit_credential",
+				url: resolveConnectUrl(act.url, appUrl),
+				fields: card.fields.map((f) => f.label)
+			}
+		};
+		case "grant_portal": return {
+			...base,
+			action: {
+				kind: "approve_portal",
+				agentId: act.agentId
+			}
+		};
+		default: return {
+			...base,
+			action: { kind: "unsupported" }
+		};
+	}
+}
+/**
+* Parse a `data-anyone-render-spec` stream chunk into a connect-card summary,
+* or null if the chunk isn't a connect card (other render specs — training,
+* deep-learn, compute-request — parse to null, same as the TUI).
+*/
+function connectCardFromChunk(chunk, appUrl) {
+	if (chunk["type"] !== "data-anyone-render-spec") return null;
+	const data = chunk["data"];
+	if (!isRecord(data)) return null;
+	const card = parseConnectCard(data["spec"]);
+	if (!card) return null;
+	return summarizeConnectCard(card, appUrl);
+}
+/** Render a connect-card summary as a human-readable action block. */
+function formatConnectCard(card) {
+	const lines = [];
+	lines.push(`\n[action needed] ${card.title}`);
+	if (card.subtitle) lines.push(card.subtitle);
+	if (card.description) lines.push(card.description);
+	switch (card.action.kind) {
+		case "open_url":
+			lines.push(`Open to continue: ${card.action.url}`);
+			break;
+		case "submit_credential":
+			lines.push(`Provide credential (${card.action.fields.join(", ") || "value"}) at: ${card.action.url}`);
+			break;
+		case "approve_portal":
+			lines.push(`Approve local-machine access for agent ${card.action.agentId} in the TUI or web app.`);
+			break;
+		case "unsupported":
+			lines.push("Open this conversation in the web app to continue.");
+			break;
+	}
+	return lines.join("\n");
+}
+
 //#endregion
 //#region src/chat/print.ts
 var print_exports = /* @__PURE__ */ __exportAll({
@@ -385,6 +672,7 @@ async function runPrint({ appUrl, sessionToken, prompt, agentSelector, conversat
 	let text = "";
 	const controller = new AbortController();
 	let streamError = null;
+	const connectCards = [];
 	await client.streamRun({
 		runId: send.runId,
 		signal: controller.signal,
@@ -401,17 +689,23 @@ async function runPrint({ appUrl, sessionToken, prompt, agentSelector, conversat
 					if (!json) process.stdout.write(delta);
 				}
 			} else if (chunk["type"] === "error") streamError = typeof chunk["errorText"] === "string" ? chunk["errorText"] : "unknown error";
+			else {
+				const card = connectCardFromChunk(chunk, appUrl);
+				if (card) connectCards.push(card);
+			}
 		}
 	});
 	if (streamError) throw new Error(streamError);
 	if (!json && text && !text.endsWith("\n")) process.stdout.write("\n");
+	if (!json) for (const card of connectCards) process.stdout.write(`${formatConnectCard(card)}\n`);
 	return {
 		agentId: agent.id,
 		agentName: agent.name,
 		conversationId: send.conversationId,
 		isNewConversation: send.isNewConversation,
 		runId: send.runId,
-		text
+		text,
+		connectCards
 	};
 }
 /**
@@ -448,4 +742,4 @@ async function readStdin() {
 }
 
 //#endregion
-export { createRestClient as i, resolveAgent as n, HttpError as r, print_exports as t };
+export { parseExternalOauthConnectParams as a, resolveConnectUrl as c, isRecord as d, HttpError as f, cardActionErrorMessage as i, parseConnectCard as l, resolveAgent as n, parseOauthConnectParams as o, createRestClient as p, MASK_CHAR as r, reconcileMaskedInput as s, print_exports as t, errorMessage as u };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skydive-cli",
-  "version": "0.1.0-beta.89",
+  "version": "0.1.0-beta.96",
   "description": "Skydive CLI — manage AI agents from the command line",
   "homepage": "https://skydive.com",
   "license": "MIT",