skydive-cli 0.2.0-beta.613 → 0.2.0-beta.618

package/dist/js/{install-D1uhYunw.mjs → install-BhPuzBxW.mjs}

@@ -1,200 +1,14 @@
 #!/usr/bin/env node
+import { S as getConfigPath } from "./print-CNIvmpqW.mjs";
 import os from "node:os";
 import path from "node:path";
-import Conf from "conf";
 import { err, ok } from "neverthrow";
 import { z } from "zod";
 import fs from "node:fs";
 
 //#region package.json
 var name = "skydive-cli";
-var version$1 = "0.2.0-beta.613";
-
-//#endregion
-//#region src/config.ts
-/** Default host for the public management API (`/v1`, API-key auth). */
-const DEFAULT_API_URL = "https://api.skydive.com";
-/**
-* Default origin for the interactive chat client (`skydive chat`).
-*
-* The API host that serves better-auth (`/api/auth/*`) and the internal tRPC
-* API (`/api/v1/trpc`) that chat streams over. We target the API host
-* directly (not the web front door) because chat opens a WebSocket and
-* authenticates with a bearer token on the upgrade request. Same host as
-* `DEFAULT_API_URL`; override with `--api-url` / `SKYDIVE_APP_URL` for local
-* dev or while the DNS record is still being provisioned.
-*/
-const DEFAULT_APP_URL = "https://api.skydive.com";
-/** Web front door, for pages opened in the user's browser. */
-const DEFAULT_WEB_URL = "https://skydive.com";
-/**
-* Origin for browser-facing links (e.g. opening a conversation's web page).
-* The app origin is the API host, which serves no web UI in production, so
-* map the default to the web front door. Overridden origins (local dev,
-* previews) serve both and pass through unchanged.
-*/
-function resolveWebUrl(appUrl) {
-	return appUrl === DEFAULT_APP_URL ? DEFAULT_WEB_URL : appUrl;
-}
-/** Prefix on workspace-scoped Skydive API keys. Kept in sync with the API's
-* `API_KEY_PREFIX` (`apps/anyone/api/src/lib/api-key.ts`); the CLI is a
-* standalone published package so it can't import the backend constant. */
-const API_KEY_PREFIX = "sky_live_";
-/**
-* Common prefix across all Skydive API key kinds — `sky_live_…` workspace
-* keys today, `sky_user_…` account keys when ANY-5105 lands. The CLI only
-* sanity-checks the family on `--api-key`; the server authoritatively rejects
-* a kind that can't drive a given route, with a clearer message than the
-* client could produce.
-*/
-const API_KEY_FAMILY_PREFIX = "sky_";
-/** Where users mint and copy API keys. Shown in the login prompt. */
-const API_KEYS_URL = "skydive.com/settings/account";
-const store = new Conf({
-	projectName: process.env["SKYDIVE_CONFIG_NAME"] ?? "skydive",
-	projectSuffix: "",
-	configFileMode: 384
-});
-function resolveConfig(opts) {
-	const apiKey = process.env["SKYDIVE_API_KEY"] ?? store.get("apiKey");
-	const apiUrl = process.env["SKYDIVE_API_URL"] ?? opts.apiUrl ?? store.get("apiUrl") ?? DEFAULT_API_URL;
-	if (!apiKey) return err({ message: "Not authenticated. Run `skydive auth login` first." });
-	return ok({
-		apiKey,
-		apiUrl
-	});
-}
-/**
-* Resolve the bearer credential for the management API (`agents` / `keys` /
-* `secrets`). The server's `/v1` gate accepts either an API key or the
-* device-flow session bearer, so both work — but only one of them tracks the
-* active workspace.
-*
-* An API key is pinned server-side to the organization that minted it and
-* ignores the workspace header by design, so it can never follow `skydive
-* workspace switch`. A key is also a strictly narrower credential than its
-* owner's session. So the session wins whenever there is one, and a key is
-* what's left for machines that never ran an interactive login.
-*
-* `SKYDIVE_SESSION_TOKEN=` (empty) suppresses session auth for one
-* invocation, to drive a specific organization's key while signed in.
-*/
-function resolveManagementAuth(opts) {
-	const session = resolveSession({ appUrl: opts.apiUrl });
-	if (session.isOk()) return ok({
-		token: session.value.sessionToken,
-		apiUrl: session.value.appUrl,
-		kind: "session",
-		pinnedWorkspaceName: null
-	});
-	const envKey = process.env["SKYDIVE_API_KEY"];
-	const storedKey = store.get("apiKey");
-	const apiKey = envKey ?? storedKey;
-	if (apiKey) return ok({
-		token: apiKey,
-		apiUrl: process.env["SKYDIVE_API_URL"] ?? opts.apiUrl ?? store.get("apiUrl") ?? DEFAULT_API_URL,
-		kind: "api-key",
-		pinnedWorkspaceName: !envKey && storedKey ? store.get("apiKeyWorkspaceName") ?? null : null
-	});
-	return err({ message: "Not authenticated. Run `skydive auth login`." });
-}
-function saveConfig(config) {
-	store.set("apiKey", config.apiKey);
-	store.set("apiUrl", config.apiUrl);
-	if (config.apiKeyId) store.set("apiKeyId", config.apiKeyId);
-	else store.delete("apiKeyId");
-	if (config.workspaceName) store.set("apiKeyWorkspaceName", config.workspaceName);
-	else store.delete("apiKeyWorkspaceName");
-}
-/** Server-side id of the auto-minted key, if login minted one. */
-function getStoredApiKeyId() {
-	return store.get("apiKeyId") ?? null;
-}
-/** Workspace the auto-minted key is pinned to, if login recorded one. */
-function getStoredApiKeyWorkspaceName() {
-	return store.get("apiKeyWorkspaceName") ?? null;
-}
-function deleteConfig() {
-	store.clear();
-}
-function getConfigPath() {
-	return store.path;
-}
-/**
-* Where the chat TUI persists its prompt history (up-arrow recall). Kept
-* beside the config file so all CLI state lives in one directory.
-*/
-function getLastSeenVersion() {
-	return store.get("lastSeenVersion");
-}
-function setLastSeenVersion(version) {
-	store.set("lastSeenVersion", version);
-}
-function getPromptHistoryPath() {
-	return path.join(path.dirname(store.path), "prompt-history.jsonl");
-}
-/**
-* Where the chat TUI persists pending review comments — one JSON file per
-* conversation, so a pending comment survives conversation switches and
-* process death. Kept beside the config file like prompt history.
-*/
-function getReviewStateDir() {
-	return path.join(path.dirname(store.path), "review");
-}
-/**
-* Resolve the chat/auth origin. Precedence: `SKYDIVE_APP_URL` env > explicit
-* `--api-url` style override > stored value > `SKYDIVE_API_URL` env >
-* `DEFAULT_APP_URL`.
-*
-* The `SKYDIVE_API_URL` fallback matters for previews: the device/`--web`
-* flow and chat hit the same api service as the management API, so pointing
-* `SKYDIVE_API_URL` at a preview stack is enough — you don't also have to set
-* `SKYDIVE_APP_URL`. Otherwise auth would silently fall through to prod
-* (`DEFAULT_APP_URL`) and hand back a prod verification URL.
-*/
-function resolveAppUrl(opts) {
-	return process.env["SKYDIVE_APP_URL"] ?? opts.appUrl ?? store.get("appUrl") ?? process.env["SKYDIVE_API_URL"] ?? DEFAULT_APP_URL;
-}
-function resolveSession(opts) {
-	const sessionToken = process.env["SKYDIVE_SESSION_TOKEN"] ?? store.get("sessionToken");
-	const appUrl = resolveAppUrl(opts);
-	if (!sessionToken) return err({ message: "Not signed in for chat. Run `skydive chat` to sign in." });
-	return ok({
-		sessionToken,
-		appUrl
-	});
-}
-function saveSession(session) {
-	store.set("sessionToken", session.sessionToken);
-	store.set("sessionObtainedAt", (/* @__PURE__ */ new Date()).toISOString());
-	store.set("appUrl", session.appUrl);
-}
-function getSavedTheme(mode) {
-	return store.get(mode === "dark" ? "themeDark" : "themeLight");
-}
-function saveTheme(mode, themeId) {
-	store.set(mode === "dark" ? "themeDark" : "themeLight", themeId);
-}
-/**
-* Whether `skydive chat` should enable portal machine sharing on launch
-* without `--share-machine`. Set by hand-editing `shareMachineDefault` in
-* config.json — deliberately no CLI command (kept off the API surface).
-* Sharing only makes the machine reachable — agents still need a
-* (persistent) grant to run anything, so this default skips the per-session
-* enable step, not the consent step.
-*/
-function getShareMachineDefault() {
-	return store.get("shareMachineDefault") ?? false;
-}
-/**
-* Whether the update check is disabled via config.json (`"updateCheck":
-* false`). The persistent counterpart to the SKYDIVE_NO_UPDATE_CHECK /
-* NO_UPDATE_NOTIFIER env opt-outs; like shareMachineDefault, set by editing
-* config.json — deliberately no CLI command.
-*/
-function getUpdateCheckDisabled() {
-	return store.get("updateCheck") === false;
-}
+var version$1 = "0.2.0-beta.618";
 
 //#endregion
 //#region src/auth/organization.ts
@@ -1243,4 +1057,4 @@ function printFatalNotice(file, memory) {
 }
 
 //#endregion
-export { deleteConfig as A, resolveAppUrl as B, setActiveWorkspace as C, DEFAULT_API_URL as D, API_KEY_PREFIX as E, getSavedTheme as F, saveConfig as G, resolveManagementAuth as H, getShareMachineDefault as I, setLastSeenVersion as J, saveSession as K, getStoredApiKeyId as L, getLastSeenVersion as M, getPromptHistoryPath as N, DEFAULT_APP_URL as O, getReviewStateDir as P, getStoredApiKeyWorkspaceName as R, listWorkspaces as S, API_KEY_FAMILY_PREFIX as T, resolveSession as U, resolveConfig as V, resolveWebUrl as W, version$1 as X, name as Y, themes as _, WORDMARK as a, getActiveWorkspaceId as b, applyTheme as c, noColorRequested as d, theme as f, themeVersion as g, themeModeFromColorFgBg as h, MARK_CELLS as i, getConfigPath as j, DEFAULT_WEB_URL as k, findTheme as l, themeMode as m, buildCrashReport as n, brandHelpArt as o, themeForMode as p, saveTheme as q, writeCrashReport as r, DEFAULT_THEME_ID as s, installCrashHandler as t, monoTheme as u, themesForMode as v, API_KEYS_URL as w, getSessionIdentity as x, ensureActiveOrganization as y, getUpdateCheckDisabled as z };
+export { setActiveWorkspace as C, listWorkspaces as S, version$1 as T, themes as _, WORDMARK as a, getActiveWorkspaceId as b, applyTheme as c, noColorRequested as d, theme as f, themeVersion as g, themeModeFromColorFgBg as h, MARK_CELLS as i, findTheme as l, themeMode as m, buildCrashReport as n, brandHelpArt as o, themeForMode as p, writeCrashReport as r, DEFAULT_THEME_ID as s, installCrashHandler as t, monoTheme as u, themesForMode as v, name as w, getSessionIdentity as x, ensureActiveOrganization as y };

package/dist/js/{print-6Bm51XhR.mjs → print-CNIvmpqW.mjs}

@@ -1,7 +1,191 @@
 #!/usr/bin/env node
-import { a as errorMessage, i as sendErrorMessage, n as createRestClient, o as isRecord, t as HttpError } from "./rest-DMpigwmN.mjs";
+import { a as errorMessage, i as sendErrorMessage, n as createRestClient, o as isRecord, t as HttpError } from "./rest-Q5yl_b2-.mjs";
+import path from "node:path";
+import Conf from "conf";
+import { err, ok } from "neverthrow";
 import stableStringify from "safe-stable-stringify";
 
+//#region src/config.ts
+/** Default host for the public management API (`/v1`, API-key auth). */
+const DEFAULT_API_URL = "https://api.skydive.com";
+/**
+* Default origin for the interactive chat client (`skydive chat`).
+*
+* The API host that serves better-auth (`/api/auth/*`) and the internal tRPC
+* API (`/api/v1/trpc`) that chat streams over. We target the API host
+* directly (not the web front door) because chat opens a WebSocket and
+* authenticates with a bearer token on the upgrade request. Same host as
+* `DEFAULT_API_URL`; override with `--api-url` / `SKYDIVE_APP_URL` for local
+* dev or while the DNS record is still being provisioned.
+*/
+const DEFAULT_APP_URL = "https://api.skydive.com";
+/** Web front door, for pages opened in the user's browser. */
+const DEFAULT_WEB_URL = "https://skydive.com";
+function resolveWebUrl(appUrl) {
+	if (appUrl == null) return appUrl;
+	return appUrl === DEFAULT_APP_URL ? DEFAULT_WEB_URL : appUrl;
+}
+/** Prefix on workspace-scoped Skydive API keys. Kept in sync with the API's
+* `API_KEY_PREFIX` (`apps/anyone/api/src/lib/api-key.ts`); the CLI is a
+* standalone published package so it can't import the backend constant. */
+const API_KEY_PREFIX = "sky_live_";
+/**
+* Common prefix across all Skydive API key kinds — `sky_live_…` workspace
+* keys today, `sky_user_…` account keys when ANY-5105 lands. The CLI only
+* sanity-checks the family on `--api-key`; the server authoritatively rejects
+* a kind that can't drive a given route, with a clearer message than the
+* client could produce.
+*/
+const API_KEY_FAMILY_PREFIX = "sky_";
+/** Where users mint and copy API keys. Shown in the login prompt. */
+const API_KEYS_URL = "skydive.com/settings/account";
+const store = new Conf({
+	projectName: process.env["SKYDIVE_CONFIG_NAME"] ?? "skydive",
+	projectSuffix: "",
+	configFileMode: 384
+});
+function resolveConfig(opts) {
+	const apiKey = process.env["SKYDIVE_API_KEY"] ?? store.get("apiKey");
+	const apiUrl = process.env["SKYDIVE_API_URL"] ?? opts.apiUrl ?? store.get("apiUrl") ?? DEFAULT_API_URL;
+	if (!apiKey) return err({ message: "Not authenticated. Run `skydive auth login` first." });
+	return ok({
+		apiKey,
+		apiUrl
+	});
+}
+/**
+* Resolve the bearer credential for the management API (`agents` / `keys` /
+* `secrets`). The server's `/v1` gate accepts either an API key or the
+* device-flow session bearer, so both work — but only one of them tracks the
+* active workspace.
+*
+* An API key is pinned server-side to the organization that minted it and
+* ignores the workspace header by design, so it can never follow `skydive
+* workspace switch`. A key is also a strictly narrower credential than its
+* owner's session. So the session wins whenever there is one, and a key is
+* what's left for machines that never ran an interactive login.
+*
+* `SKYDIVE_SESSION_TOKEN=` (empty) suppresses session auth for one
+* invocation, to drive a specific organization's key while signed in.
+*/
+function resolveManagementAuth(opts) {
+	const session = resolveSession({ appUrl: opts.apiUrl });
+	if (session.isOk()) return ok({
+		token: session.value.sessionToken,
+		apiUrl: session.value.appUrl,
+		kind: "session",
+		pinnedWorkspaceName: null
+	});
+	const envKey = process.env["SKYDIVE_API_KEY"];
+	const storedKey = store.get("apiKey");
+	const apiKey = envKey ?? storedKey;
+	if (apiKey) return ok({
+		token: apiKey,
+		apiUrl: process.env["SKYDIVE_API_URL"] ?? opts.apiUrl ?? store.get("apiUrl") ?? DEFAULT_API_URL,
+		kind: "api-key",
+		pinnedWorkspaceName: !envKey && storedKey ? store.get("apiKeyWorkspaceName") ?? null : null
+	});
+	return err({ message: "Not authenticated. Run `skydive auth login`." });
+}
+function saveConfig(config) {
+	store.set("apiKey", config.apiKey);
+	store.set("apiUrl", config.apiUrl);
+	if (config.apiKeyId) store.set("apiKeyId", config.apiKeyId);
+	else store.delete("apiKeyId");
+	if (config.workspaceName) store.set("apiKeyWorkspaceName", config.workspaceName);
+	else store.delete("apiKeyWorkspaceName");
+}
+/** Server-side id of the auto-minted key, if login minted one. */
+function getStoredApiKeyId() {
+	return store.get("apiKeyId") ?? null;
+}
+/** Workspace the auto-minted key is pinned to, if login recorded one. */
+function getStoredApiKeyWorkspaceName() {
+	return store.get("apiKeyWorkspaceName") ?? null;
+}
+function deleteConfig() {
+	store.clear();
+}
+function getConfigPath() {
+	return store.path;
+}
+/**
+* Where the chat TUI persists its prompt history (up-arrow recall). Kept
+* beside the config file so all CLI state lives in one directory.
+*/
+function getLastSeenVersion() {
+	return store.get("lastSeenVersion");
+}
+function setLastSeenVersion(version) {
+	store.set("lastSeenVersion", version);
+}
+function getPromptHistoryPath() {
+	return path.join(path.dirname(store.path), "prompt-history.jsonl");
+}
+/**
+* Where the chat TUI persists pending review comments — one JSON file per
+* conversation, so a pending comment survives conversation switches and
+* process death. Kept beside the config file like prompt history.
+*/
+function getReviewStateDir() {
+	return path.join(path.dirname(store.path), "review");
+}
+/**
+* Resolve the chat/auth origin. Precedence: `SKYDIVE_APP_URL` env > explicit
+* `--api-url` style override > stored value > `SKYDIVE_API_URL` env >
+* `DEFAULT_APP_URL`.
+*
+* The `SKYDIVE_API_URL` fallback matters for previews: the device/`--web`
+* flow and chat hit the same api service as the management API, so pointing
+* `SKYDIVE_API_URL` at a preview stack is enough — you don't also have to set
+* `SKYDIVE_APP_URL`. Otherwise auth would silently fall through to prod
+* (`DEFAULT_APP_URL`) and hand back a prod verification URL.
+*/
+function resolveAppUrl(opts) {
+	return process.env["SKYDIVE_APP_URL"] ?? opts.appUrl ?? store.get("appUrl") ?? process.env["SKYDIVE_API_URL"] ?? DEFAULT_APP_URL;
+}
+function resolveSession(opts) {
+	const sessionToken = process.env["SKYDIVE_SESSION_TOKEN"] ?? store.get("sessionToken");
+	const appUrl = resolveAppUrl(opts);
+	if (!sessionToken) return err({ message: "Not signed in for chat. Run `skydive chat` to sign in." });
+	return ok({
+		sessionToken,
+		appUrl
+	});
+}
+function saveSession(session) {
+	store.set("sessionToken", session.sessionToken);
+	store.set("sessionObtainedAt", (/* @__PURE__ */ new Date()).toISOString());
+	store.set("appUrl", session.appUrl);
+}
+function getSavedTheme(mode) {
+	return store.get(mode === "dark" ? "themeDark" : "themeLight");
+}
+function saveTheme(mode, themeId) {
+	store.set(mode === "dark" ? "themeDark" : "themeLight", themeId);
+}
+/**
+* Whether `skydive chat` should enable portal machine sharing on launch
+* without `--share-machine`. Set by hand-editing `shareMachineDefault` in
+* config.json — deliberately no CLI command (kept off the API surface).
+* Sharing only makes the machine reachable — agents still need a
+* (persistent) grant to run anything, so this default skips the per-session
+* enable step, not the consent step.
+*/
+function getShareMachineDefault() {
+	return store.get("shareMachineDefault") ?? false;
+}
+/**
+* Whether the update check is disabled via config.json (`"updateCheck":
+* false`). The persistent counterpart to the SKYDIVE_NO_UPDATE_CHECK /
+* NO_UPDATE_NOTIFIER env opt-outs; like shareMachineDefault, set by editing
+* config.json — deliberately no CLI command.
+*/
+function getUpdateCheckDisabled() {
+	return store.get("updateCheck") === false;
+}
+
+//#endregion
 //#region src/chat/tui/chat/card.ts
 const urlActionKinds = [
 	"open_oauth",
@@ -227,14 +411,20 @@ function summarizeConnectCard(card, appUrl) {
 	const act = button.action;
 	switch (act.kind) {
 		case "open_oauth":
-		case "open_external_oauth":
-		case "open_github_app": return {
+		case "open_external_oauth": return {
 			...base,
 			action: {
 				kind: "open_url",
 				url: resolveConnectUrl(act.url, appUrl)
 			}
 		};
+		case "open_github_app": return {
+			...base,
+			action: {
+				kind: "open_url",
+				url: resolveConnectUrl(act.url, resolveWebUrl(appUrl))
+			}
+		};
 		case "submit_credential": return {
 			...base,
 			action: {
@@ -487,4 +677,4 @@ async function readStdin() {
 }
 
 //#endregion
-export { runPrint as a, cardActionErrorMessage as c, reconcileMaskedInput as d, resolveConnectUrl as f, resolveAgent as i, parseExternalOauthConnectParams as l, specKeyFor as m, messageGet as n, toPrintError as o, parseConnectCard as p, readStdin as r, MASK_CHAR as s, collectRunText as t, parseOauthConnectParams as u };
+export { getUpdateCheckDisabled as A, getLastSeenVersion as C, getShareMachineDefault as D, getSavedTheme as E, resolveWebUrl as F, saveConfig as I, saveSession as L, resolveConfig as M, resolveManagementAuth as N, getStoredApiKeyId as O, resolveSession as P, saveTheme as R, getConfigPath as S, getReviewStateDir as T, API_KEY_PREFIX as _, runPrint as a, DEFAULT_WEB_URL as b, cardActionErrorMessage as c, reconcileMaskedInput as d, resolveConnectUrl as f, API_KEY_FAMILY_PREFIX as g, API_KEYS_URL as h, resolveAgent as i, resolveAppUrl as j, getStoredApiKeyWorkspaceName as k, parseExternalOauthConnectParams as l, specKeyFor as m, messageGet as n, toPrintError as o, parseConnectCard as p, readStdin as r, MASK_CHAR as s, collectRunText as t, parseOauthConnectParams as u, DEFAULT_API_URL as v, getPromptHistoryPath as w, deleteConfig as x, DEFAULT_APP_URL as y, setLastSeenVersion as z };

package/dist/js/{print-qXJymvuF.mjs → print-nefugWMx.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import "./rest-DMpigwmN.mjs";
-import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-6Bm51XhR.mjs";
+import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-CNIvmpqW.mjs";
+import "./rest-Q5yl_b2-.mjs";
 
 export { messageGet, readStdin, resolveAgent, runPrint };

package/dist/js/{print-share-DE_dkZX7.mjs → print-share-D8Nn1qFq.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { n as printError } from "./output-B4cW10Ph.mjs";
+import { n as printError } from "./output-DYzzdXYV.mjs";
 
 //#region src/chat/print-share.ts
 /**
@@ -14,7 +14,7 @@ import { n as printError } from "./output-B4cW10Ph.mjs";
 * the reply (and to --json).
 */
 async function connectMachineShare({ appUrl, sessionToken, timeoutHint }) {
-	const { PortalClient } = await import("./client-BRfmlbgI.mjs");
+	const { PortalClient } = await import("./client-CKlIpyAb.mjs");
 	let signalConnected;
 	const connected = new Promise((resolve) => {
 		signalConnected = resolve;
@@ -22,7 +22,7 @@ async function connectMachineShare({ appUrl, sessionToken, timeoutHint }) {
 	const machineShare = new PortalClient({
 		appUrl,
 		sessionToken,
-		cwd: process.cwd(),
+		resolveCwd: () => process.cwd(),
 		onState: (state) => {
 			if (state.status === "connected") signalConnected();
 			if (state.status === "error") console.error(`portal: connection error: ${state.error ?? "unknown"} — retrying`);

package/dist/js/{raw-pty-Dbi2kb9v.mjs → raw-pty-BcjbTjHJ.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as SandboxStream } from "./client-BVOAwU8M.mjs";
+import { t as SandboxStream } from "./client-DfcJFEbh.mjs";
 
 //#region src/chat/sandbox/raw-pty.ts
 /**

package/dist/js/raw-pty-ChUHav4d.mjs

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import "./client-DfcJFEbh.mjs";
+import { t as runRawPtyPassthrough } from "./raw-pty-BcjbTjHJ.mjs";
+
+export { runRawPtyPassthrough };

package/dist/js/{rest-C3RySrPa.mjs → rest-CBROy0L-.mjs}

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
-import { i as sendErrorMessage, n as createRestClient, r as errorDetail, t as HttpError } from "./rest-DMpigwmN.mjs";
+import { i as sendErrorMessage, n as createRestClient, r as errorDetail, t as HttpError } from "./rest-Q5yl_b2-.mjs";
 
 export { createRestClient };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skydive-cli",
-  "version": "0.2.0-beta.613",
+  "version": "0.2.0-beta.618",
   "description": "Skydive CLI — cloud agents from the command line",
   "homepage": "https://skydive.com",
   "license": "MIT",

package/dist/js/api-BGWcPuik.mjs

@@ -1,145 +0,0 @@
-#!/usr/bin/env node
-import { t as HttpError } from "./rest-DMpigwmN.mjs";
-import os from "node:os";
-import { z } from "zod";
-
-//#region src/chat/portal/machine.ts
-/**
-* Identity this machine registers under when the CLI shares it via the portal.
-*
-* The `-cli` suffix / `(CLI)` label keep a CLI-shared machine a DISTINCT portal
-* device from the same host's Skydive Desktop app. `portal_device` is unique on
-* (org, user, machineName), and directives route to whichever socket holds the
-* device — if the CLI and desktop registered the same name they'd share a
-* device row and both execute every directive. Distinct names also make the
-* grant UI unambiguous about which surface is being authorized.
-*/
-function machineIdentity() {
-	const host = (os.hostname() || "machine").trim().replace(/\.local$/i, "") || "machine";
-	return {
-		machineName: `${host}-cli`,
-		friendlyName: `${host} (CLI)`
-	};
-}
-const INHERITED_ENV = [
-	"HOME",
-	"USER",
-	"LOGNAME",
-	"SHELL",
-	"LANG",
-	"LC_ALL",
-	"TMPDIR",
-	"TERM",
-	"PATH"
-];
-function buildEnv(extra) {
-	const env = {};
-	for (const key of INHERITED_ENV) {
-		const value = process.env[key];
-		if (value !== void 0) env[key] = value;
-	}
-	if (extra) for (const [key, value] of Object.entries(extra)) env[key] = value;
-	return env;
-}
-/**
-* Build the desktop-portal WebSocket URL from the chat origin. Mirrors the Rust
-* desktop client: http→ws, https→wss, scheme-less defaults to wss, and the
-* machine/label ride as query pairs (percent-encoded by URL).
-*/
-function portalWsUrl(appUrl, machine, label) {
-	const base = appUrl.replace(/\/+$/, "");
-	let wsBase;
-	if (base.startsWith("https://")) wsBase = `wss://${base.slice(8)}`;
-	else if (base.startsWith("http://")) wsBase = `ws://${base.slice(7)}`;
-	else wsBase = `wss://${base}`;
-	const url = new URL(`${wsBase}/api/v1/portal/desktop`);
-	url.searchParams.set("machine", machine);
-	url.searchParams.set("label", label);
-	return url.toString();
-}
-
-//#endregion
-//#region src/chat/portal/api.ts
-/**
-* The portal's session-authed REST surface, shared by `PortalClient` (the
-* TUI/`portal open` connection) and the `skydive portal` management
-* commands, so the endpoint contracts and response schemas live in exactly
-* one place.
-*/
-const deviceSchema = z.object({
-	id: z.string(),
-	machineName: z.string(),
-	friendlyName: z.string(),
-	connected: z.boolean(),
-	lastSeen: z.string().nullable(),
-	grantedAgentIds: z.array(z.string())
-});
-const devicesResponseSchema = z.object({
-	devices: z.array(deviceSchema),
-	agents: z.array(z.object({
-		id: z.string(),
-		name: z.string()
-	}))
-});
-const deviceTokenSchema = z.object({ token: z.string().min(1) });
-async function portalFetch(auth, path, init) {
-	const res = await fetch(`${auth.appUrl}${path}`, {
-		method: init.method,
-		headers: {
-			authorization: `Bearer ${auth.sessionToken}`,
-			accept: "application/json",
-			...init.body ? { "content-type": "application/json" } : {}
-		},
-		...init.body ? { body: init.body } : {}
-	});
-	if (!res.ok) {
-		const body = await res.text().catch(() => "");
-		throw new HttpError(res.status, body);
-	}
-	return res.json();
-}
-async function fetchPortalDevices(auth) {
-	const json = await portalFetch(auth, "/api/v1/portal/devices", { method: "GET" });
-	return devicesResponseSchema.parse(json);
-}
-const registerResponseSchema = z.object({ device: z.object({ id: z.string() }) });
-/**
-* Register this machine's device row without connecting. Connecting registers
-* as a side effect; this covers granting an agent on a machine that has never
-* shared yet (the grant references the device row).
-*/
-async function registerPortalDevice(auth, { machineName, friendlyName }) {
-	const json = await portalFetch(auth, "/api/v1/portal/devices", {
-		method: "POST",
-		body: JSON.stringify({
-			machineName,
-			friendlyName
-		})
-	});
-	return registerResponseSchema.parse(json).device;
-}
-/** Short-lived token the machine presents when dialing the portal WebSocket. */
-async function mintPortalDeviceToken(auth) {
-	const json = await portalFetch(auth, "/api/v1/portal/device-token", { method: "POST" });
-	return deviceTokenSchema.parse(json).token;
-}
-async function grantPortalAccess(auth, { deviceId, agentId }) {
-	await portalFetch(auth, `/api/v1/portal/devices/${encodeURIComponent(deviceId)}/grants`, {
-		method: "POST",
-		body: JSON.stringify({ agentId })
-	});
-}
-async function revokePortalAccess(auth, { deviceId, agentId }) {
-	await portalFetch(auth, `/api/v1/portal/devices/${encodeURIComponent(deviceId)}/grants/${encodeURIComponent(agentId)}`, { method: "DELETE" });
-}
-/**
-* The device row for a given machine identity. Matching is by `machineName`
-* equality — the stable per-surface handle (`<host>-cli` vs the desktop's
-* `<host>`), not the display label.
-*/
-function findThisDevice(devices, machineName) {
-	return devices.find((device) => device.machineName === machineName) ?? null;
-}
-
-//#endregion
-export { registerPortalDevice as a, machineIdentity as c, mintPortalDeviceToken as i, portalWsUrl as l, findThisDevice as n, revokePortalAccess as o, grantPortalAccess as r, buildEnv as s, fetchPortalDevices as t };

package/dist/js/client-BRfmlbgI.mjs

@@ -1,6 +0,0 @@
-#!/usr/bin/env node
-import "./rest-DMpigwmN.mjs";
-import "./api-BGWcPuik.mjs";
-import { t as PortalClient } from "./client-l3OrGKaC.mjs";
-
-export { PortalClient };

package/dist/js/raw-pty-pspO57gT.mjs

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-import "./client-BVOAwU8M.mjs";
-import { t as runRawPtyPassthrough } from "./raw-pty-Dbi2kb9v.mjs";
-
-export { runRawPtyPassthrough };