skydive-cli 0.3.0-beta.776 → 0.3.0-beta.794

package/CHANGELOG.md

@@ -35,6 +35,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Agent-led coding-agent import (`skydive import`).
 - Per-workspace scoping on the REST client, and cross-org `--agent <uuid>` auto-switches workspace.
 - `skydive-beta` wrapper for the canary channel.
+- `skydive config` command to view and set the safe, hand-editable CLI preferences (`shareMachineDefault`, `updateCheck`) without opening `config.json`. `config`/`config list` shows each key, its effective value, and whether it comes from the file or the built-in default; `config get`/`set`/`unset` read and change one key; `config path` prints the config file location. It only ever touches those preference keys, never credentials or flow-managed state.
 
 ### Fixed
 

package/README.md

@@ -132,6 +132,9 @@ skydive portal grant --agent <id|name>
 skydive portal revoke --agent <id|name>
 skydive portal status
 
+skydive config                  # list CLI preferences
+skydive config set updateCheck false
+
 skydive completion install      # set up TAB completion for your shell
 ```
 
@@ -433,9 +436,20 @@ Persistent state lives in a per-user JSON file managed by
 `SKYDIVE_CONFIG_NAME`). Most keys are written by flows — `auth login`, the
 device-login flow, the in-TUI theme picker — but the file is plain JSON and
 read fresh on every invocation, so preference keys can be set by editing it
-directly. There is deliberately no `skydive config` command.
+directly.
+
+The safe, hand-editable preference keys are also managed by `skydive config`,
+which only ever touches those keys — never credentials or flow-managed state:
+
+```sh
+skydive config                      # list preferences, values, and source
+skydive config get updateCheck      # print the effective value of one key
+skydive config set updateCheck false
+skydive config unset updateCheck    # revert to the built-in default
+skydive config path                 # print the config.json location
+```
 
-Hand-editable keys:
+Editable keys:
 
 | Key                   | Type    | Effect                                                                                                                                                                                                                          |
 | --------------------- | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |

package/dist/js/bin.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { C as setActiveWorkspace, S as listWorkspaces, T as version, _ as themes, b as getActiveWorkspaceId, o as brandHelpArt, t as installCrashHandler, w as name, x as getSessionIdentity, y as ensureActiveOrganization } from "./install-CDccuBwm.mjs";
-import { A as resolveAppUrl, C as getPromptHistoryPath, D as getStoredApiKeyId, E as getShareMachineDefault, F as saveConfig, I as saveSession, M as resolveManagementAuth, N as resolveSession, O as getStoredApiKeyWorkspaceName, R as setLastSeenVersion, S as getLastSeenVersion, _ as API_KEY_PREFIX, b as deleteConfig, g as API_KEY_FAMILY_PREFIX, h as API_KEYS_URL, i as resolveAgent, j as resolveConfig, k as getUpdateCheckDisabled, v as DEFAULT_API_URL, x as getConfigPath } from "./print-Cd-bVSEJ.mjs";
+import { C as setActiveWorkspace, S as listWorkspaces, T as version, _ as themes, b as getActiveWorkspaceId, o as brandHelpArt, t as installCrashHandler, w as name, x as getSessionIdentity, y as ensureActiveOrganization } from "./install-DqLgkAHr.mjs";
+import { A as getStoredApiKeyWorkspaceName, B as setLastSeenVersion, C as getLastSeenVersion, F as resolveSession, L as saveConfig, M as resolveAppUrl, N as resolveConfig, O as getShareMachineDefault, P as resolveManagementAuth, R as saveSession, S as getConfigPath, T as getPromptHistoryPath, _ as API_KEY_PREFIX, b as PREFERENCES, g as API_KEY_FAMILY_PREFIX, h as API_KEYS_URL, i as resolveAgent, j as getUpdateCheckDisabled, k as getStoredApiKeyId, v as DEFAULT_API_URL, w as getPreference, x as deleteConfig } from "./print-Bmgp3ZT9.mjs";
 import { n as printError, r as printTable, t as output } from "./output-DYzzdXYV.mjs";
 import { n as createRestClient, t as HttpError } from "./rest-BlN_uWmL.mjs";
 import { a as registerPortalDevice, i as grantPortalAccess, n as fetchPortalDevices, o as revokePortalAccess, r as findThisDevice, s as machineIdentity } from "./client-Dc7GZ3PG.mjs";
@@ -1056,7 +1056,7 @@ function requireRestClient(argv) {
 
 //#endregion
 //#region src/commands/agents.ts
-const listCommand$4 = {
+const listCommand$5 = {
 	command: "list",
 	describe: "List agents in the active workspace",
 	builder: (y) => y.option("limit", {
@@ -1131,7 +1131,7 @@ function truncate(value, max) {
 	if (trimmed.length <= max) return trimmed || "-";
 	return `${trimmed.slice(0, max - 1)}\u2026`;
 }
-const getCommand$1 = {
+const getCommand$2 = {
 	command: "get <id>",
 	describe: "Get agent details",
 	builder: (y) => y.positional("id", {
@@ -1201,7 +1201,7 @@ const createCommand$1 = {
 const agentsCommand = {
 	command: "agents",
 	describe: "Manage agents",
-	builder: (y) => y.command(listCommand$4).command(getCommand$1).command(createCommand$1).demandCommand(1, "Specify a subcommand: list, get, create"),
+	builder: (y) => y.command(listCommand$5).command(getCommand$2).command(createCommand$1).demandCommand(1, "Specify a subcommand: list, get, create"),
 	handler: () => {}
 };
 
@@ -1500,7 +1500,7 @@ const importCommand = {
 				process.exit(1);
 			}
 		}
-		const { runChat } = await import("./boot-Dbcys7qY.mjs");
+		const { runChat } = await import("./boot-C-PAidLX.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
@@ -1535,7 +1535,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 	});
 	const extra = (argv.print ?? "").trim();
 	const prompt = buildImportSeedPrompt(process.cwd()) + (extra ? `\n\nAdditional instructions: ${extra}` : "");
-	const { runPrint } = await import("./print-CPCFci60.mjs");
+	const { runPrint } = await import("./print-CB9kyvkV.mjs");
 	try {
 		const result = await runPrint({
 			appUrl,
@@ -1559,7 +1559,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 
 //#endregion
 //#region src/commands/keys.ts
-const listCommand$3 = {
+const listCommand$4 = {
 	command: "list",
 	describe: "List API keys for an agent",
 	handler: async (argv) => {
@@ -1648,7 +1648,7 @@ const keysCommand = {
 		type: "string",
 		demandOption: true,
 		describe: "Agent ID"
-	}).command(listCommand$3).command(createCommand).command(revokeCommand$1).demandCommand(1, "Specify a subcommand: list, create, revoke"),
+	}).command(listCommand$4).command(createCommand).command(revokeCommand$1).demandCommand(1, "Specify a subcommand: list, create, revoke"),
 	handler: () => {}
 };
 
@@ -1660,7 +1660,7 @@ async function readStdin() {
 	for await (const chunk of process.stdin) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
 	return Buffer.concat(chunks).toString("utf8").replace(/\n$/, "");
 }
-const listCommand$2 = {
+const listCommand$3 = {
 	command: "list",
 	describe: "List secret names for an agent (values are never shown)",
 	handler: async (argv) => {
@@ -1681,7 +1681,7 @@ const listCommand$2 = {
 		printTable(["Name"], keys.map((k) => [k]));
 	}
 };
-const setCommand = {
+const setCommand$1 = {
 	command: "set <key> [value]",
 	describe: "Set (create or overwrite) a secret. Reads value from stdin if omitted.",
 	builder: (y) => y.positional("key", {
@@ -1746,7 +1746,7 @@ const secretsCommand = {
 		type: "string",
 		demandOption: true,
 		describe: "Agent ID"
-	}).command(listCommand$2).command(setCommand).command(rmCommand).demandCommand(1, "Specify a subcommand: list, set, rm"),
+	}).command(listCommand$3).command(setCommand$1).command(rmCommand).demandCommand(1, "Specify a subcommand: list, set, rm"),
 	handler: () => {}
 };
 
@@ -1912,7 +1912,7 @@ const chatCommand = {
 			sessionToken: session.value.sessionToken,
 			agentSelector: argv.agent ?? null
 		});
-		const { runChat } = await import("./boot-Dbcys7qY.mjs");
+		const { runChat } = await import("./boot-C-PAidLX.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
@@ -1978,7 +1978,7 @@ async function runPrintMode({ argv, appUrl }) {
 		printError(`${session.error.message} For non-interactive use, run \`skydive auth login\` first, or set SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { runPrint, readStdin } = await import("./print-CPCFci60.mjs");
+	const { runPrint, readStdin } = await import("./print-CB9kyvkV.mjs");
 	await ensureAgentWorkspace({
 		appUrl,
 		sessionToken: session.value.sessionToken,
@@ -2042,7 +2042,7 @@ async function runPrintMode({ argv, appUrl }) {
 * Message ids are the currency of this API: `chat -p --json` reports the
 * `messageId` and this command consumes it. Run ids stay server-side.
 */
-const getCommand = {
+const getCommand$1 = {
 	command: "get <message-id>",
 	describe: "Fetch a message by id and print the reply (recovers a timed-out -p)",
 	builder: (y) => y.positional("message-id", {
@@ -2057,7 +2057,7 @@ const getCommand = {
 			printError(`${session.error.message} Run \`skydive auth login\` first, or set SKYDIVE_SESSION_TOKEN.`);
 			process.exit(1);
 		}
-		const { messageGet } = await import("./print-CPCFci60.mjs");
+		const { messageGet } = await import("./print-CB9kyvkV.mjs");
 		try {
 			const result = await messageGet({
 				appUrl,
@@ -2075,7 +2075,7 @@ const getCommand = {
 const messagesCommand = {
 	command: "messages",
 	describe: "Inspect chat messages and re-fetch agent replies",
-	builder: (y) => y.command(getCommand).demandCommand(1, "Specify a subcommand: get"),
+	builder: (y) => y.command(getCommand$1).demandCommand(1, "Specify a subcommand: get"),
 	handler: () => {}
 };
 
@@ -2098,7 +2098,7 @@ function messageToText(message) {
 	}
 	return chunks.join("\n").trim();
 }
-const listCommand$1 = {
+const listCommand$2 = {
 	command: "list",
 	describe: "List an agent's conversations",
 	builder: (y) => y.option("agent", {
@@ -2188,7 +2188,7 @@ const conversationsCommand = {
 	command: "conversations",
 	aliases: ["conv"],
 	describe: "List and read agent conversations",
-	builder: (y) => y.command(listCommand$1).command(showCommand).demandCommand(1, "Specify a subcommand: list, show"),
+	builder: (y) => y.command(listCommand$2).command(showCommand).demandCommand(1, "Specify a subcommand: list, show"),
 	handler: () => {}
 };
 
@@ -2230,7 +2230,7 @@ async function runList(argv, { hint }) {
 	]));
 	if (hint && !argv.quiet) console.log("\nRun `skydive workspace switch` to pick a workspace, or pass its slug directly.");
 }
-const listCommand = {
+const listCommand$1 = {
 	command: "list",
 	describe: "List workspaces on your account",
 	handler: (argv) => runList(argv, { hint: false })
@@ -2254,7 +2254,7 @@ const switchCommand = {
 				printError("The workspace picker needs the Bun runtime and it could not be set up automatically. Pass a workspace slug instead, or install Bun and retry.");
 				process.exit(1);
 			}
-			const { runWorkspacePicker } = await import("./boot-Dbcys7qY.mjs");
+			const { runWorkspacePicker } = await import("./boot-C-PAidLX.mjs");
 			await runWorkspacePicker(session);
 			return;
 		}
@@ -2287,7 +2287,7 @@ const switchCommand = {
 const workspaceCommand = {
 	command: "workspace",
 	describe: "List or switch the workspace all `skydive` commands act on",
-	builder: (y) => y.command(listCommand).command(switchCommand),
+	builder: (y) => y.command(listCommand$1).command(switchCommand),
 	handler: (argv) => runList(argv, { hint: true })
 };
 
@@ -2606,7 +2606,7 @@ const sandboxCommand = {
 	handler: async (argv) => {
 		const session = requireSession(argv);
 		const { createRestClient } = await import("./rest-CDTXCmUb.mjs");
-		const { resolveAgent } = await import("./print-CPCFci60.mjs");
+		const { resolveAgent } = await import("./print-CB9kyvkV.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken
@@ -3356,10 +3356,146 @@ const updateCommand = {
 	}
 };
 
+//#endregion
+//#region src/commands/config.ts
+/**
+* Resolve a preference key or exit 1 with a clear message. `choices` on each
+* positional already rejects unknown keys through yargs' own validation
+* (routing to the top-level `.fail()` handler), so this is a defensive guard
+* that also narrows the type. It follows the CLI's convention of
+* `printError` + `process.exit(1)` rather than throwing, because a throw from
+* an async yargs handler rejects `parseAsync` instead of being caught by
+* `.fail()`. `process.exit` returns `never`, so callers can treat the result
+* as always defined.
+*/
+function resolvePreference(key) {
+	const pref = getPreference(key ?? "");
+	if (!pref) {
+		printError(`Unknown preference "${key}". Run \`skydive config list\` to see editable keys.`);
+		process.exit(1);
+	}
+	return pref;
+}
+/** One row's worth of state for a preference, used by `list` and `get`. */
+function snapshot(pref) {
+	return {
+		key: pref.key,
+		value: pref.read(),
+		source: pref.isSet() ? "set" : "default",
+		describe: pref.describe
+	};
+}
+const listCommand = {
+	command: "list",
+	aliases: ["ls"],
+	describe: "Show every editable preference, its value, and its source",
+	handler: (argv) => {
+		const rows = PREFERENCES.map(snapshot);
+		if (argv.json) {
+			output(argv, rows);
+			return;
+		}
+		printTable([
+			"Key",
+			"Value",
+			"Source",
+			"Description"
+		], rows.map((r) => [
+			r.key,
+			String(r.value),
+			r.source,
+			r.describe
+		]));
+	}
+};
+const getCommand = {
+	command: "get <key>",
+	describe: "Print the effective value of one preference",
+	builder: (y) => y.positional("key", {
+		type: "string",
+		demandOption: true,
+		choices: PREFERENCES.map((p) => p.key),
+		describe: "Preference key"
+	}),
+	handler: (argv) => {
+		const pref = resolvePreference(argv.key);
+		if (argv.json) {
+			output(argv, snapshot(pref));
+			return;
+		}
+		console.log(String(pref.read()));
+	}
+};
+const setCommand = {
+	command: "set <key> <value>",
+	describe: "Set a preference (e.g. `config set updateCheck false`)",
+	builder: (y) => y.positional("key", {
+		type: "string",
+		demandOption: true,
+		choices: PREFERENCES.map((p) => p.key),
+		describe: "Preference key"
+	}).positional("value", {
+		type: "string",
+		demandOption: true,
+		describe: "New value"
+	}),
+	handler: (argv) => {
+		const pref = resolvePreference(argv.key);
+		const parsed = pref.parse(argv.value ?? "");
+		if (parsed.isErr()) {
+			printError(`${pref.key}: ${parsed.error}`);
+			process.exit(1);
+		}
+		pref.write(parsed.value);
+		if (argv.json) {
+			output(argv, snapshot(pref));
+			return;
+		}
+		if (!argv.quiet) console.log(`Set ${pref.key} = ${String(parsed.value)}`);
+	}
+};
+const unsetCommand = {
+	command: "unset <key>",
+	aliases: ["reset"],
+	describe: "Remove a preference, reverting it to the built-in default",
+	builder: (y) => y.positional("key", {
+		type: "string",
+		demandOption: true,
+		choices: PREFERENCES.map((p) => p.key),
+		describe: "Preference key"
+	}),
+	handler: (argv) => {
+		const pref = resolvePreference(argv.key);
+		pref.clear();
+		if (argv.json) {
+			output(argv, snapshot(pref));
+			return;
+		}
+		if (!argv.quiet) console.log(`Unset ${pref.key} (now ${String(pref.read())} by default)`);
+	}
+};
+const pathCommand = {
+	command: "path",
+	describe: "Print the on-disk config file path",
+	handler: (argv) => {
+		if (argv.json) {
+			output(argv, { path: getConfigPath() });
+			return;
+		}
+		console.log(getConfigPath());
+	}
+};
+const configCommand = {
+	command: "config",
+	describe: "View and set CLI preferences (safe, hand-editable keys only)",
+	builder: (y) => y.command(listCommand).command(getCommand).command(setCommand).command(unsetCommand).command(pathCommand),
+	handler: (argv) => listCommand.handler(argv)
+};
+
 //#endregion
 //#region src/cli.ts
 function createCli(argv) {
-	return yargs(argv).scriptName("skydive").usage("$0 <command> [options]").parserConfiguration({ "populate--": true }).example("skydive auth login", "Store your API key").example("skydive chat", "Open the interactive chat TUI (prod)").example("skydive chat --api-url http://localhost:4500", "Chat against a local dev API").example("skydive agents list", "List your agents").example("skydive completion install", "Set up TAB completion for your shell").example("skydive keys create \"my-key\"", "Create an API key").example("skydive secrets set OPENAI_API_KEY --agent-id <id>", "Set a secret (value from stdin)").example("skydive workspace list", "List workspaces on your account").example("skydive workspace switch acme-team", "Switch the workspace all `skydive` commands act on").example("skydive portal open --agent grace", "Open the portal to this machine for an agent, headless (no TUI)").option("json", {
+	return yargs(argv).scriptName("skydive").usage("$0 <command> [options]").parserConfiguration({ "populate--": true }).example("skydive auth login", "Store your API key").example("skydive chat", "Open the interactive chat TUI (prod)").example("skydive chat --api-url http://localhost:4500", "Chat against a local dev API").example("skydive agents list", "List your agents").example("skydive completion install", "Set up TAB completion for your shell").example("skydive keys create \"my-key\"", "Create an API key").example("skydive secrets set OPENAI_API_KEY --agent-id <id>", "Set a secret (value from stdin)").example("skydive workspace list", "List workspaces on your account").example("skydive config set updateCheck false", "Disable the daily update check").example("skydive workspace switch acme-team", "Switch the workspace all `skydive` commands act on").example("skydive portal open --agent grace", "Open the portal to this machine for an agent, headless (no TUI)").option("json", {
 		type: "boolean",
 		default: false,
 		global: true,
@@ -3373,7 +3509,7 @@ function createCli(argv) {
 		type: "string",
 		global: true,
 		describe: "Override API base URL"
-	}).command(authCommand).command(chatCommand).command(messagesCommand).command(conversationsCommand).command(agentsCommand).command(importCommand).command(keysCommand).command(secretsCommand).command(workspaceCommand).command(portalCommand).command(sandboxCommand).command(updateCommand).command(completionCommand).demandCommand(1, "Specify a command. Run --help for usage.").strict().wrap(null).version(version).alias("v", "version").alias("h", "help").help().fail((msg, err) => {
+	}).command(authCommand).command(chatCommand).command(messagesCommand).command(conversationsCommand).command(agentsCommand).command(importCommand).command(keysCommand).command(secretsCommand).command(workspaceCommand).command(portalCommand).command(sandboxCommand).command(updateCommand).command(configCommand).command(completionCommand).demandCommand(1, "Specify a command. Run --help for usage.").strict().wrap(null).version(version).alias("v", "version").alias("h", "help").help().fail((msg, err) => {
 		printError(err ? err instanceof Error ? err.message : String(err) : msg ?? "Unknown error");
 		process.exit(1);
 	});
@@ -3586,7 +3722,7 @@ function setupUpdateCheck(argv) {
 
 //#endregion
 //#region src/changelog.generated.ts
-const CHANGELOG_MD = "# Changelog\n\nAll notable changes to the Skydive CLI are documented here.\n\nThe format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),\nand this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n\n## [Unreleased]\n\n## [0.3.0] - 2026-08-04\n\n### Added\n\n**Chat TUI**\n\n- `/fork` slash command to fork a conversation at any point and continue in a new thread.\n- `/conversation` switches threads from inside a live session.\n- `/compact` triggers manual conversation compaction.\n- `/portal` and `/copy` slash commands.\n- Archive the current conversation from the chat TUI.\n- `--new` flag on `skydive chat` to start a fresh conversation.\n- Debounced server-side conversation search in the picker, with title matches ranked first.\n- File review pane orientation toggle, and review comments in the file pane.\n- Pinned plan card controls and a jump-to-latest hint.\n- Terminal title (OSC) follows the live conversation title on every screen; inside cmux the workspace is renamed too, and linked PRs are pushed to the cmux sidebar.\n- Every participating agent shows in the conversation list; connect cards each have their own identity, and ctrl+r asks which connect card to act on.\n- Colored Skydive splash art in `skydive --help` and the TUI pickers.\n- New-agent name prefilled from the server's suggestion.\n\n**CLI & platform**\n\n- `skydive update` self-updater, with an update notice when a new version is available.\n- Shell completions for bash, zsh, and fish via `completion install`.\n- Portal daemon: one connection per host with per-conversation working directories.\n- Agent-led coding-agent import (`skydive import`).\n- Per-workspace scoping on the REST client, and cross-org `--agent <uuid>` auto-switches workspace.\n- `skydive-beta` wrapper for the canary channel.\n\n### Fixed\n\n- `skydive update` no longer claims an update is available on every npm install.\n- Chat memory is bounded (payload clamps + windowed rows) with a memory watchdog and OOM diagnostic report; transcript rows are memoized so streaming stops re-rendering the whole chat.\n- Chat-send failures map to real error messages.\n- Notification and sidebar previews use the last text block of the reply and strip inline markdown.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n- Sending to non-web channel conversations is blocked in the TUI.\n- GitHub bot connect opens on the web front door, not api.skydive.com.\n- TUI activity counter times from the run, not the screen.\n\n## [0.2.0] - 2026-07-29\n\n### Added\n\n**Sandbox & machine access**\n\n- Standalone `skydive sandbox` command for direct access to an agent's sandbox.\n- `/sandbox` in the chat TUI — live PTY session and one-shot command execution.\n- Headless machine sharing via `skydive portal`, with self-registering portal grants.\n- `shareMachineDefault` config key for always-on portal sharing.\n\n**Chat TUI**\n\n- File pane (`ctrl+g`) with Changes and Files tabs: a shared file tree plus source viewer and a workspace browser, mouse-resizable and responsive to terminal size.\n- Agent todo list rendered in the chat TUI, above the composer, mirroring the web chat's todo card.\n- Fuzzy finder in the conversation and agent pickers.\n- Slash-command autocomplete menu.\n- Paste or drag-and-drop any file into the composer; paste clipboard images with Cmd+V.\n- Run local shell commands with `!` in the composer.\n- Conversation recaps, streamed live title updates, and per-agent attribution on assistant turns.\n- Working timer rolls up into minutes and hours.\n- Conversation picker paginates past 50 conversations and shows only your own conversations.\n- Esc leaves a live run; typing `exit` quits the chat.\n- Cursor Dark theme.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n\n**Headless & scripting**\n\n- Resume a conversation by id.\n- `conversations list` and `conversations show` for transcript reads.\n- `messages get`, with run recovery keyed on message id.\n- Connect cards surface in headless `-p` mode so a driving agent never gets stuck.\n\n**Authentication**\n\n- `skydive auth login` via the browser now auto-mints an API key, so one login yields both a chat session and a usable management credential. Management commands announce the key's pinned workspace when it drives them, so a workspace mismatch is visible at use time.\n- Workspace picker on the device authorization page.\n- Account and workspace identity shown in `auth status`.\n\n**Platform**\n\n- Standalone binary builds compiling the CLI into a per-target executable.\n- Interactive workspace switcher; management commands follow the active workspace.\n- Terminal host integrations and agent notifications.\n\n### Fixed\n\n- Transcript errors collapse to one line, click to expand (REST and portal errors keep their full body).\n- Dragged/pasted image file paths attach the file instead of inserting path text, including macOS paths with literal parentheses.\n- Bare URLs in chat markdown are hyperlinked so they survive text wrap.\n- Composer draft is preserved across TUI overlays.\n- Relative connect links resolve before opening the browser.\n- Numbered markdown headings render colored in the TUI.\n- Chat transcript pages by 75% of a screen; picker rows stay on one line.\n- Run starts push to the TUI over the conversation stream.\n- Security: remediated high-severity dependency findings and cleared tar/shell-quote CVEs.\n\n## [0.1.0] - 2026-07-21\n\nInitial public release: `skydive chat` TUI, agent and conversation management,\ndevice authorization, and headless `-p` mode.\n";
+const CHANGELOG_MD = "# Changelog\n\nAll notable changes to the Skydive CLI are documented here.\n\nThe format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),\nand this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n\n## [Unreleased]\n\n## [0.3.0] - 2026-08-04\n\n### Added\n\n**Chat TUI**\n\n- `/fork` slash command to fork a conversation at any point and continue in a new thread.\n- `/conversation` switches threads from inside a live session.\n- `/compact` triggers manual conversation compaction.\n- `/portal` and `/copy` slash commands.\n- Archive the current conversation from the chat TUI.\n- `--new` flag on `skydive chat` to start a fresh conversation.\n- Debounced server-side conversation search in the picker, with title matches ranked first.\n- File review pane orientation toggle, and review comments in the file pane.\n- Pinned plan card controls and a jump-to-latest hint.\n- Terminal title (OSC) follows the live conversation title on every screen; inside cmux the workspace is renamed too, and linked PRs are pushed to the cmux sidebar.\n- Every participating agent shows in the conversation list; connect cards each have their own identity, and ctrl+r asks which connect card to act on.\n- Colored Skydive splash art in `skydive --help` and the TUI pickers.\n- New-agent name prefilled from the server's suggestion.\n\n**CLI & platform**\n\n- `skydive update` self-updater, with an update notice when a new version is available.\n- Shell completions for bash, zsh, and fish via `completion install`.\n- Portal daemon: one connection per host with per-conversation working directories.\n- Agent-led coding-agent import (`skydive import`).\n- Per-workspace scoping on the REST client, and cross-org `--agent <uuid>` auto-switches workspace.\n- `skydive-beta` wrapper for the canary channel.\n- `skydive config` command to view and set the safe, hand-editable CLI preferences (`shareMachineDefault`, `updateCheck`) without opening `config.json`. `config`/`config list` shows each key, its effective value, and whether it comes from the file or the built-in default; `config get`/`set`/`unset` read and change one key; `config path` prints the config file location. It only ever touches those preference keys, never credentials or flow-managed state.\n\n### Fixed\n\n- `skydive update` no longer claims an update is available on every npm install.\n- Chat memory is bounded (payload clamps + windowed rows) with a memory watchdog and OOM diagnostic report; transcript rows are memoized so streaming stops re-rendering the whole chat.\n- Chat-send failures map to real error messages.\n- Notification and sidebar previews use the last text block of the reply and strip inline markdown.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n- Sending to non-web channel conversations is blocked in the TUI.\n- GitHub bot connect opens on the web front door, not api.skydive.com.\n- TUI activity counter times from the run, not the screen.\n\n## [0.2.0] - 2026-07-29\n\n### Added\n\n**Sandbox & machine access**\n\n- Standalone `skydive sandbox` command for direct access to an agent's sandbox.\n- `/sandbox` in the chat TUI — live PTY session and one-shot command execution.\n- Headless machine sharing via `skydive portal`, with self-registering portal grants.\n- `shareMachineDefault` config key for always-on portal sharing.\n\n**Chat TUI**\n\n- File pane (`ctrl+g`) with Changes and Files tabs: a shared file tree plus source viewer and a workspace browser, mouse-resizable and responsive to terminal size.\n- Agent todo list rendered in the chat TUI, above the composer, mirroring the web chat's todo card.\n- Fuzzy finder in the conversation and agent pickers.\n- Slash-command autocomplete menu.\n- Paste or drag-and-drop any file into the composer; paste clipboard images with Cmd+V.\n- Run local shell commands with `!` in the composer.\n- Conversation recaps, streamed live title updates, and per-agent attribution on assistant turns.\n- Working timer rolls up into minutes and hours.\n- Conversation picker paginates past 50 conversations and shows only your own conversations.\n- Esc leaves a live run; typing `exit` quits the chat.\n- Cursor Dark theme.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n\n**Headless & scripting**\n\n- Resume a conversation by id.\n- `conversations list` and `conversations show` for transcript reads.\n- `messages get`, with run recovery keyed on message id.\n- Connect cards surface in headless `-p` mode so a driving agent never gets stuck.\n\n**Authentication**\n\n- `skydive auth login` via the browser now auto-mints an API key, so one login yields both a chat session and a usable management credential. Management commands announce the key's pinned workspace when it drives them, so a workspace mismatch is visible at use time.\n- Workspace picker on the device authorization page.\n- Account and workspace identity shown in `auth status`.\n\n**Platform**\n\n- Standalone binary builds compiling the CLI into a per-target executable.\n- Interactive workspace switcher; management commands follow the active workspace.\n- Terminal host integrations and agent notifications.\n\n### Fixed\n\n- Transcript errors collapse to one line, click to expand (REST and portal errors keep their full body).\n- Dragged/pasted image file paths attach the file instead of inserting path text, including macOS paths with literal parentheses.\n- Bare URLs in chat markdown are hyperlinked so they survive text wrap.\n- Composer draft is preserved across TUI overlays.\n- Relative connect links resolve before opening the browser.\n- Numbered markdown headings render colored in the TUI.\n- Chat transcript pages by 75% of a screen; picker rows stay on one line.\n- Run starts push to the TUI over the conversation stream.\n- Security: remediated high-severity dependency findings and cleared tar/shell-quote CVEs.\n\n## [0.1.0] - 2026-07-21\n\nInitial public release: `skydive chat` TUI, agent and conversation management,\ndevice authorization, and headless `-p` mode.\n";
 
 //#endregion
 //#region src/whats-new.ts

package/dist/js/{boot-Dbcys7qY.mjs → boot-C-PAidLX.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { C as setActiveWorkspace, S as listWorkspaces, a as WORDMARK, b as getActiveWorkspaceId, c as applyTheme, d as noColorRequested, f as theme, g as themeVersion, h as themeModeFromColorFgBg, i as MARK_CELLS, l as findTheme, m as themeMode, n as buildCrashReport, p as themeForMode, r as writeCrashReport, s as DEFAULT_THEME_ID, t as installCrashHandler, u as monoTheme, v as themesForMode } from "./install-CDccuBwm.mjs";
-import { L as saveTheme, P as resolveWebUrl, T as getSavedTheme, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, i as resolveAgent, l as parseExternalOauthConnectParams, m as specKeyFor, p as parseConnectCard, s as MASK_CHAR, u as parseOauthConnectParams, v as DEFAULT_API_URL, w as getReviewStateDir, x as getConfigPath, y as DEFAULT_APP_URL } from "./print-Cd-bVSEJ.mjs";
+import { C as setActiveWorkspace, S as listWorkspaces, a as WORDMARK, b as getActiveWorkspaceId, c as applyTheme, d as noColorRequested, f as theme, g as themeVersion, h as themeModeFromColorFgBg, i as MARK_CELLS, l as findTheme, m as themeMode, n as buildCrashReport, p as themeForMode, r as writeCrashReport, s as DEFAULT_THEME_ID, t as installCrashHandler, u as monoTheme, v as themesForMode } from "./install-DqLgkAHr.mjs";
+import { D as getSavedTheme, E as getReviewStateDir, I as resolveWebUrl, S as getConfigPath, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, i as resolveAgent, l as parseExternalOauthConnectParams, m as specKeyFor, p as parseConnectCard, s as MASK_CHAR, u as parseOauthConnectParams, v as DEFAULT_API_URL, y as DEFAULT_APP_URL, z as saveTheme } from "./print-Bmgp3ZT9.mjs";
 import { a as errorMessage, i as sendErrorMessage, n as createRestClient, o as isRecord, r as errorDetail, t as HttpError } from "./rest-BlN_uWmL.mjs";
 import { t as PortalClient } from "./client-Dc7GZ3PG.mjs";
 import { d as makeLineParser, f as parseDaemonMessage, l as daemonPaths, n as ensureDaemonRunning, s as LOCAL_PROTOCOL_VERSION, u as encodeLine } from "./daemon-Co4CtpXZ.mjs";

package/dist/js/{install-CDccuBwm.mjs → install-DqLgkAHr.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { x as getConfigPath } from "./print-Cd-bVSEJ.mjs";
+import { S as getConfigPath } from "./print-Bmgp3ZT9.mjs";
 import os from "node:os";
 import path from "node:path";
 import { err, ok } from "neverthrow";
@@ -8,7 +8,7 @@ import fs from "node:fs";
 
 //#region package.json
 var name = "skydive-cli";
-var version$1 = "0.3.0-beta.776";
+var version$1 = "0.3.0-beta.794";
 
 //#endregion
 //#region src/auth/organization.ts

package/dist/js/{print-Cd-bVSEJ.mjs → print-Bmgp3ZT9.mjs}

@@ -175,6 +175,10 @@ function saveTheme(mode, themeId) {
 function getShareMachineDefault() {
 	return store.get("shareMachineDefault") ?? false;
 }
+/** Test-only setter; production writes happen by editing config.json. */
+function saveShareMachineDefault(value) {
+	store.set("shareMachineDefault", value);
+}
 /**
 * Whether the update check is disabled via config.json (`"updateCheck":
 * false`). The persistent counterpart to the SKYDIVE_NO_UPDATE_CHECK /
@@ -184,6 +188,52 @@ function getShareMachineDefault() {
 function getUpdateCheckDisabled() {
 	return store.get("updateCheck") === false;
 }
+/** Test-only setter; production writes happen by editing config.json. */
+function saveUpdateCheck(value) {
+	if (value === void 0) {
+		store.delete("updateCheck");
+		return;
+	}
+	store.set("updateCheck", value);
+}
+function parseBoolean(raw) {
+	const v = raw.trim().toLowerCase();
+	if ([
+		"true",
+		"1",
+		"yes",
+		"on"
+	].includes(v)) return ok(true);
+	if ([
+		"false",
+		"0",
+		"no",
+		"off"
+	].includes(v)) return ok(false);
+	return err(`Expected a boolean (true/false), got "${raw}".`);
+}
+const PREFERENCES = [{
+	key: "shareMachineDefault",
+	type: "boolean",
+	describe: "Share this machine over the portal on `skydive chat` launch, as if --share-machine were passed. Default false.",
+	read: () => getShareMachineDefault(),
+	isSet: () => store.has("shareMachineDefault"),
+	parse: parseBoolean,
+	write: (value) => saveShareMachineDefault(value),
+	clear: () => store.delete("shareMachineDefault")
+}, {
+	key: "updateCheck",
+	type: "boolean",
+	describe: "Run the daily background update check and its \"Update available\" notice. Set false to disable. Default true.",
+	read: () => !getUpdateCheckDisabled(),
+	isSet: () => store.has("updateCheck"),
+	parse: parseBoolean,
+	write: (value) => saveUpdateCheck(value),
+	clear: () => store.delete("updateCheck")
+}];
+function getPreference(key) {
+	return PREFERENCES.find((p) => p.key === key);
+}
 
 //#endregion
 //#region src/chat/tui/chat/card.ts
@@ -677,4 +727,4 @@ async function readStdin() {
 }
 
 //#endregion
-export { resolveAppUrl as A, getPromptHistoryPath as C, getStoredApiKeyId as D, getShareMachineDefault as E, saveConfig as F, saveSession as I, saveTheme as L, resolveManagementAuth as M, resolveSession as N, getStoredApiKeyWorkspaceName as O, resolveWebUrl as P, setLastSeenVersion as R, getLastSeenVersion as S, getSavedTheme as T, API_KEY_PREFIX as _, runPrint as a, deleteConfig as b, cardActionErrorMessage as c, reconcileMaskedInput as d, resolveConnectUrl as f, API_KEY_FAMILY_PREFIX as g, API_KEYS_URL as h, resolveAgent as i, resolveConfig as j, getUpdateCheckDisabled as k, parseExternalOauthConnectParams as l, specKeyFor as m, messageGet as n, toPrintError as o, parseConnectCard as p, readStdin as r, MASK_CHAR as s, collectRunText as t, parseOauthConnectParams as u, DEFAULT_API_URL as v, getReviewStateDir as w, getConfigPath as x, DEFAULT_APP_URL as y };
+export { getStoredApiKeyWorkspaceName as A, setLastSeenVersion as B, getLastSeenVersion as C, getSavedTheme as D, getReviewStateDir as E, resolveSession as F, resolveWebUrl as I, saveConfig as L, resolveAppUrl as M, resolveConfig as N, getShareMachineDefault as O, resolveManagementAuth as P, saveSession as R, getConfigPath as S, getPromptHistoryPath as T, API_KEY_PREFIX as _, runPrint as a, PREFERENCES as b, cardActionErrorMessage as c, reconcileMaskedInput as d, resolveConnectUrl as f, API_KEY_FAMILY_PREFIX as g, API_KEYS_URL as h, resolveAgent as i, getUpdateCheckDisabled as j, getStoredApiKeyId as k, parseExternalOauthConnectParams as l, specKeyFor as m, messageGet as n, toPrintError as o, parseConnectCard as p, readStdin as r, MASK_CHAR as s, collectRunText as t, parseOauthConnectParams as u, DEFAULT_API_URL as v, getPreference as w, deleteConfig as x, DEFAULT_APP_URL as y, saveTheme as z };

package/dist/js/{print-CPCFci60.mjs → print-CB9kyvkV.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-Cd-bVSEJ.mjs";
+import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-Bmgp3ZT9.mjs";
 import "./rest-BlN_uWmL.mjs";
 
 export { messageGet, readStdin, resolveAgent, runPrint };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skydive-cli",
-  "version": "0.3.0-beta.776",
+  "version": "0.3.0-beta.794",
   "description": "Skydive CLI — cloud agents from the command line",
   "homepage": "https://skydive.com",
   "license": "MIT",