skydive-cli 0.3.0-beta.794 → 0.3.0-beta.823

package/dist/js/bin.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { C as setActiveWorkspace, S as listWorkspaces, T as version, _ as themes, b as getActiveWorkspaceId, o as brandHelpArt, t as installCrashHandler, w as name, x as getSessionIdentity, y as ensureActiveOrganization } from "./install-DqLgkAHr.mjs";
-import { A as getStoredApiKeyWorkspaceName, B as setLastSeenVersion, C as getLastSeenVersion, F as resolveSession, L as saveConfig, M as resolveAppUrl, N as resolveConfig, O as getShareMachineDefault, P as resolveManagementAuth, R as saveSession, S as getConfigPath, T as getPromptHistoryPath, _ as API_KEY_PREFIX, b as PREFERENCES, g as API_KEY_FAMILY_PREFIX, h as API_KEYS_URL, i as resolveAgent, j as getUpdateCheckDisabled, k as getStoredApiKeyId, v as DEFAULT_API_URL, w as getPreference, x as deleteConfig } from "./print-Bmgp3ZT9.mjs";
+import { C as setActiveWorkspace, S as listWorkspaces, T as version, _ as themes, b as getActiveWorkspaceId, o as brandHelpArt, t as installCrashHandler, w as name, x as getSessionIdentity, y as ensureActiveOrganization } from "./install-DrX2_gs-.mjs";
+import { A as getStoredApiKeyWorkspaceName, C as getLastSeenVersion, F as resolveManagementAuth, I as resolveSession, M as resolveAppUrl, N as resolveChatAuth, O as getShareMachineDefault, P as resolveConfig, R as saveConfig, S as getConfigPath, T as getPromptHistoryPath, V as setLastSeenVersion, _ as API_KEY_PREFIX, b as PREFERENCES, g as API_KEY_FAMILY_PREFIX, h as API_KEYS_URL, i as resolveAgent, j as getUpdateCheckDisabled, k as getStoredApiKeyId, v as DEFAULT_API_URL, w as getPreference, x as deleteConfig, z as saveSession } from "./print-Bs_6CrTC.mjs";
 import { n as printError, r as printTable, t as output } from "./output-DYzzdXYV.mjs";
 import { n as createRestClient, t as HttpError } from "./rest-BlN_uWmL.mjs";
 import { a as registerPortalDevice, i as grantPortalAccess, n as fetchPortalDevices, o as revokePortalAccess, r as findThisDevice, s as machineIdentity } from "./client-Dc7GZ3PG.mjs";
@@ -1047,10 +1047,14 @@ function requireManagementClient(argv) {
 }
 /** Resolve the session (see {@link requireSession}) and build a REST client. */
 function requireRestClient(argv) {
-	const session = requireSession(argv);
+	const auth = resolveChatAuth({ appUrl: resolveAppUrl({ appUrl: argv["api-url"] }) });
+	if (auth.isErr()) {
+		printError(`${auth.error.message} Run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
+		process.exit(1);
+	}
 	return createRestClient({
-		appUrl: session.appUrl,
-		sessionToken: session.sessionToken
+		appUrl: auth.value.appUrl,
+		sessionToken: auth.value.token
 	});
 }
 
@@ -1500,7 +1504,7 @@ const importCommand = {
 				process.exit(1);
 			}
 		}
-		const { runChat } = await import("./boot-C-PAidLX.mjs");
+		const { runChat } = await import("./boot-BypwzKHP.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
@@ -1535,7 +1539,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 	});
 	const extra = (argv.print ?? "").trim();
 	const prompt = buildImportSeedPrompt(process.cwd()) + (extra ? `\n\nAdditional instructions: ${extra}` : "");
-	const { runPrint } = await import("./print-CB9kyvkV.mjs");
+	const { runPrint } = await import("./print-bhjVgVMK.mjs");
 	try {
 		const result = await runPrint({
 			appUrl,
@@ -1885,10 +1889,10 @@ const chatCommand = {
 			printError(`chat needs the Bun runtime and it couldn't be set up automatically (no network, an unsupported platform, or a failed download). Install Bun (https://bun.sh) and run chat under it, e.g. \`bun ${process.argv[1] ?? "skydive"} chat\`, or point SKYDIVE_BUN_PATH at an existing bun binary. For a non-interactive one-shot that runs under Node, use \`chat -p "<prompt>"\`.`);
 			process.exit(1);
 		}
-		let session = resolveSession({ appUrl });
-		if (session.isErr()) {
+		let auth = resolveChatAuth({ appUrl });
+		if (auth.isErr()) {
 			if (isNonInteractive()) {
-				printError("Not signed in for chat and no interactive terminal. Run `skydive auth login`, or set SKYDIVE_SESSION_TOKEN.");
+				printError("Not signed in and no interactive terminal. Run `skydive auth login`, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.");
 				process.exit(1);
 			}
 			const login = await loginWithDevice({ appUrl });
@@ -1896,8 +1900,8 @@ const chatCommand = {
 				printError(login.error.message);
 				process.exit(1);
 			}
-			session = resolveSession({ appUrl });
-			if (session.isErr()) {
+			auth = resolveChatAuth({ appUrl });
+			if (auth.isErr()) {
 				printError("Signed in, but no session was stored.");
 				process.exit(1);
 			}
@@ -1909,13 +1913,14 @@ const chatCommand = {
 		}
 		await ensureAgentWorkspace({
 			appUrl,
-			sessionToken: session.value.sessionToken,
+			sessionToken: auth.value.token,
 			agentSelector: argv.agent ?? null
 		});
-		const { runChat } = await import("./boot-C-PAidLX.mjs");
+		const { runChat } = await import("./boot-BypwzKHP.mjs");
 		await runChat({
-			appUrl,
-			sessionToken: session.value.sessionToken,
+			appUrl: auth.value.appUrl,
+			sessionToken: auth.value.token,
+			authKind: auth.value.kind,
 			shareMachine: resolveShareMachine(argv),
 			promptHistoryPath: getPromptHistoryPath(),
 			theme: themeId,
@@ -1973,15 +1978,15 @@ async function ensureAgentWorkspace({ appUrl, sessionToken, agentSelector }) {
 	process.exit(1);
 }
 async function runPrintMode({ argv, appUrl }) {
-	const session = resolveSession({ appUrl });
-	if (session.isErr()) {
-		printError(`${session.error.message} For non-interactive use, run \`skydive auth login\` first, or set SKYDIVE_SESSION_TOKEN.`);
+	const auth = resolveChatAuth({ appUrl });
+	if (auth.isErr()) {
+		printError(`${auth.error.message} For non-interactive use, run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { runPrint, readStdin } = await import("./print-CB9kyvkV.mjs");
+	const { runPrint, readStdin } = await import("./print-bhjVgVMK.mjs");
 	await ensureAgentWorkspace({
 		appUrl,
-		sessionToken: session.value.sessionToken,
+		sessionToken: auth.value.token,
 		agentSelector: argv.agent ?? null
 	});
 	let prompt = (argv.print ?? "").trim();
@@ -1997,18 +2002,23 @@ async function runPrintMode({ argv, appUrl }) {
 		}
 	}
 	let machineShare = null;
-	if (resolveShareMachine(argv)) {
+	if (resolveShareMachine(argv)) if (auth.value.kind === "api-key") {
+		if (argv["share-machine"] === true) {
+			printError("Machine sharing needs a browser session (API keys cannot grant local access). Run `skydive auth login --web` first, or re-run with --no-share-machine.");
+			process.exit(1);
+		}
+	} else {
 		const { connectMachineShare } = await import("./print-share-7qfpQtWK.mjs");
 		machineShare = await connectMachineShare({
-			appUrl,
-			sessionToken: session.value.sessionToken,
+			appUrl: auth.value.appUrl,
+			sessionToken: auth.value.token,
 			timeoutHint: "Re-run with --no-share-machine (or unset `shareMachineDefault` in the CLI config), or check `skydive portal status`."
 		});
 	}
 	try {
 		const result = await runPrint({
-			appUrl,
-			sessionToken: session.value.sessionToken,
+			appUrl: auth.value.appUrl,
+			sessionToken: auth.value.token,
 			prompt,
 			agentSelector: argv.agent ?? null,
 			conversationId: argv.conversation ?? null,
@@ -2051,17 +2061,16 @@ const getCommand$1 = {
 		describe: "Message id (the `messageId` from a prior `chat -p --json`)"
 	}),
 	handler: async (argv) => {
-		const appUrl = resolveAppUrl({ appUrl: argv["api-url"] });
-		const session = resolveSession({ appUrl });
-		if (session.isErr()) {
-			printError(`${session.error.message} Run \`skydive auth login\` first, or set SKYDIVE_SESSION_TOKEN.`);
+		const auth = resolveChatAuth({ appUrl: resolveAppUrl({ appUrl: argv["api-url"] }) });
+		if (auth.isErr()) {
+			printError(`${auth.error.message} Run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 			process.exit(1);
 		}
-		const { messageGet } = await import("./print-CB9kyvkV.mjs");
+		const { messageGet } = await import("./print-bhjVgVMK.mjs");
 		try {
 			const result = await messageGet({
-				appUrl,
-				sessionToken: session.value.sessionToken,
+				appUrl: auth.value.appUrl,
+				sessionToken: auth.value.token,
 				messageId: argv["message-id"],
 				json: argv.json
 			});
@@ -2254,7 +2263,7 @@ const switchCommand = {
 				printError("The workspace picker needs the Bun runtime and it could not be set up automatically. Pass a workspace slug instead, or install Bun and retry.");
 				process.exit(1);
 			}
-			const { runWorkspacePicker } = await import("./boot-C-PAidLX.mjs");
+			const { runWorkspacePicker } = await import("./boot-BypwzKHP.mjs");
 			await runWorkspacePicker(session);
 			return;
 		}
@@ -2606,7 +2615,7 @@ const sandboxCommand = {
 	handler: async (argv) => {
 		const session = requireSession(argv);
 		const { createRestClient } = await import("./rest-CDTXCmUb.mjs");
-		const { resolveAgent } = await import("./print-CB9kyvkV.mjs");
+		const { resolveAgent } = await import("./print-bhjVgVMK.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken

package/dist/js/{boot-C-PAidLX.mjs → boot-BypwzKHP.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { C as setActiveWorkspace, S as listWorkspaces, a as WORDMARK, b as getActiveWorkspaceId, c as applyTheme, d as noColorRequested, f as theme, g as themeVersion, h as themeModeFromColorFgBg, i as MARK_CELLS, l as findTheme, m as themeMode, n as buildCrashReport, p as themeForMode, r as writeCrashReport, s as DEFAULT_THEME_ID, t as installCrashHandler, u as monoTheme, v as themesForMode } from "./install-DqLgkAHr.mjs";
-import { D as getSavedTheme, E as getReviewStateDir, I as resolveWebUrl, S as getConfigPath, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, i as resolveAgent, l as parseExternalOauthConnectParams, m as specKeyFor, p as parseConnectCard, s as MASK_CHAR, u as parseOauthConnectParams, v as DEFAULT_API_URL, y as DEFAULT_APP_URL, z as saveTheme } from "./print-Bmgp3ZT9.mjs";
+import { C as setActiveWorkspace, S as listWorkspaces, a as WORDMARK, b as getActiveWorkspaceId, c as applyTheme, d as noColorRequested, f as theme, g as themeVersion, h as themeModeFromColorFgBg, i as MARK_CELLS, l as findTheme, m as themeMode, n as buildCrashReport, p as themeForMode, r as writeCrashReport, s as DEFAULT_THEME_ID, t as installCrashHandler, u as monoTheme, v as themesForMode } from "./install-DrX2_gs-.mjs";
+import { B as saveTheme, D as getSavedTheme, E as getReviewStateDir, L as resolveWebUrl, S as getConfigPath, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, i as resolveAgent, l as parseExternalOauthConnectParams, m as specKeyFor, p as parseConnectCard, s as MASK_CHAR, u as parseOauthConnectParams, v as DEFAULT_API_URL, y as DEFAULT_APP_URL } from "./print-Bs_6CrTC.mjs";
 import { a as errorMessage, i as sendErrorMessage, n as createRestClient, o as isRecord, r as errorDetail, t as HttpError } from "./rest-BlN_uWmL.mjs";
 import { t as PortalClient } from "./client-Dc7GZ3PG.mjs";
 import { d as makeLineParser, f as parseDaemonMessage, l as daemonPaths, n as ensureDaemonRunning, s as LOCAL_PROTOCOL_VERSION, u as encodeLine } from "./daemon-Co4CtpXZ.mjs";
@@ -69,6 +69,7 @@ const useStore = create((set, get) => ({
 	themeLocked: false,
 	appUrl: null,
 	sessionToken: null,
+	authKind: "session",
 	workspaceName: null,
 	rest: null,
 	promptHistoryPath: null,
@@ -437,10 +438,11 @@ function createPortalClient(opts) {
 * user turns sharing on from the chat screen. Detaching on unmount leaves the
 * daemon running for any other attached CLIs.
 */
-function usePortal({ appUrl, sessionToken, shareMachine }) {
+function usePortal({ appUrl, sessionToken, shareMachine, enabled = true }) {
 	const syncPortal = useStore((s) => s.syncPortal);
 	const setPortalClient = useStore((s) => s.setPortalClient);
 	useEffect(() => {
+		if (!enabled) return;
 		const client = createPortalClient({
 			appUrl,
 			sessionToken,
@@ -463,6 +465,7 @@ function usePortal({ appUrl, sessionToken, shareMachine }) {
 		appUrl,
 		sessionToken,
 		shareMachine,
+		enabled,
 		syncPortal,
 		setPortalClient
 	]);
@@ -1687,8 +1690,13 @@ function AgentPickerScreen() {
 	const [cache, setCache] = useState({});
 	const [state, setState] = useState({ kind: "loading" });
 	useKeyboard((key) => {
-		if (key.name === "w" && key.ctrl) goTo({ kind: "workspace-picker" });
-		else if (key.name === "n" && key.ctrl) goTo({ kind: "agent-create" });
+		if (key.name === "w" && key.ctrl) {
+			if (useStore.getState().authKind === "api-key") {
+				useStore.getState().showToast({ message: "API keys are pinned to one workspace. Run `skydive auth login --web` to switch workspaces." });
+				return;
+			}
+			goTo({ kind: "workspace-picker" });
+		} else if (key.name === "n" && key.ctrl) goTo({ kind: "agent-create" });
 		else if (key.name === "tab") setScope((s) => s === "mine" ? "org" : "mine");
 	});
 	useEffect(() => {
@@ -10476,7 +10484,10 @@ function ChatScreen({ agent, conversation }) {
 		leaveForScreen
 	]);
 	const toggleShare = useCallback(() => {
-		if (!portalClient) return;
+		if (!portalClient) {
+			useStore.getState().showToast({ message: useStore.getState().authKind === "api-key" ? "local access needs a browser session — run `skydive auth login --web`" : "local access is unavailable in this session" });
+			return;
+		}
 		if (portal.status === "off") {
 			declinedRef.current.delete(agent.id);
 			portalClient.enable();
@@ -10517,7 +10528,7 @@ function ChatScreen({ agent, conversation }) {
 	}, [agent.id, setPortalPrompt]);
 	const openPortalAccess = useCallback(() => {
 		if (!portalClient) {
-			useStore.getState().showToast({ message: "local access is unavailable in this session" });
+			useStore.getState().showToast({ message: useStore.getState().authKind === "api-key" ? "local access needs a browser session — run `skydive auth login --web`" : "local access is unavailable in this session" });
 			return;
 		}
 		switch (portal.status) {
@@ -11541,7 +11552,7 @@ function ToastView() {
 
 //#endregion
 //#region src/chat/tui/app.tsx
-function App({ appUrl, sessionToken, shareMachine, promptHistoryPath, notifications, agentSelector, conversationId, newConversation }) {
+function App({ appUrl, sessionToken, authKind, shareMachine, promptHistoryPath, notifications, agentSelector, conversationId, newConversation }) {
 	const renderer = useRenderer();
 	const screen = useStore((s) => s.screen);
 	const chatTitle = useStore((s) => s.chatTitle);
@@ -11557,7 +11568,8 @@ function App({ appUrl, sessionToken, shareMachine, promptHistoryPath, notificati
 	usePortal({
 		appUrl,
 		sessionToken,
-		shareMachine
+		shareMachine,
+		enabled: authKind === "session"
 	});
 	useEffect(() => {
 		agentHost.transition({ state: "idle" });
@@ -11585,6 +11597,7 @@ function App({ appUrl, sessionToken, shareMachine, promptHistoryPath, notificati
 	const fail = useStore((s) => s.fail);
 	const setWorkspaceName = useStore((s) => s.setWorkspaceName);
 	useEffect(() => {
+		if (authKind !== "session") return;
 		let cancelled = false;
 		(async () => {
 			const [activeId, workspaces] = await Promise.all([getActiveWorkspaceId({
@@ -11603,6 +11616,7 @@ function App({ appUrl, sessionToken, shareMachine, promptHistoryPath, notificati
 	}, [
 		appUrl,
 		sessionToken,
+		authKind,
 		setWorkspaceName
 	]);
 	useEffect(() => {
@@ -12126,13 +12140,14 @@ async function settleBootThemeMode({ source, applyThemeMode, graceMs = THEME_QUE
 * module — and the heavy OpenTUI dependency graph it pulls in — is
 * dynamically imported and never loaded on the Node management path.
 */
-async function runChat({ appUrl, sessionToken, shareMachine, promptHistoryPath, theme: themeOverride, notifications, agentSelector, conversationId, newConversation, seedPrompt }) {
+async function runChat({ appUrl, sessionToken, authKind = "session", shareMachine, promptHistoryPath, theme: themeOverride, notifications, agentSelector, conversationId, newConversation, seedPrompt }) {
 	await registerGrammars();
 	const watchdog = startMemoryWatchdog();
 	installCrashHandler({ memoryProvider: () => watchdog.snapshot() });
 	const renderer = await createCliRenderer({ exitOnCtrlC: false });
 	extend({ markdown: LinkifiedMarkdownRenderable });
 	useStore.setState({
+		authKind,
 		seedPrompt: seedPrompt ?? null,
 		autoGrantMachine: Boolean(seedPrompt && shareMachine),
 		newConversationIntent: newConversation
@@ -12152,6 +12167,7 @@ async function runChat({ appUrl, sessionToken, shareMachine, promptHistoryPath,
 	createRoot(renderer).render(/* @__PURE__ */ jsx(App, {
 		appUrl,
 		sessionToken,
+		authKind,
 		shareMachine,
 		promptHistoryPath,
 		notifications,

package/dist/js/{install-DqLgkAHr.mjs → install-DrX2_gs-.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { S as getConfigPath } from "./print-Bmgp3ZT9.mjs";
+import { S as getConfigPath } from "./print-Bs_6CrTC.mjs";
 import os from "node:os";
 import path from "node:path";
 import { err, ok } from "neverthrow";
@@ -8,7 +8,7 @@ import fs from "node:fs";
 
 //#region package.json
 var name = "skydive-cli";
-var version$1 = "0.3.0-beta.794";
+var version$1 = "0.3.0-beta.823";
 
 //#endregion
 //#region src/auth/organization.ts

package/dist/js/{print-Bmgp3ZT9.mjs → print-Bs_6CrTC.mjs}

@@ -153,6 +153,21 @@ function resolveSession(opts) {
 		appUrl
 	});
 }
+function resolveChatAuth(opts) {
+	const session = resolveSession({ appUrl: opts.appUrl });
+	if (session.isOk()) return ok({
+		token: session.value.sessionToken,
+		appUrl: session.value.appUrl,
+		kind: "session"
+	});
+	const apiKey = process.env["SKYDIVE_API_KEY"] ?? store.get("apiKey");
+	if (apiKey) return ok({
+		token: apiKey,
+		appUrl: process.env["SKYDIVE_APP_URL"] ?? opts.appUrl ?? store.get("apiUrl") ?? process.env["SKYDIVE_API_URL"] ?? DEFAULT_APP_URL,
+		kind: "api-key"
+	});
+	return err({ message: "Not signed in. Run `skydive auth login` first." });
+}
 function saveSession(session) {
 	store.set("sessionToken", session.sessionToken);
 	store.set("sessionObtainedAt", (/* @__PURE__ */ new Date()).toISOString());
@@ -727,4 +742,4 @@ async function readStdin() {
 }
 
 //#endregion
-export { getStoredApiKeyWorkspaceName as A, setLastSeenVersion as B, getLastSeenVersion as C, getSavedTheme as D, getReviewStateDir as E, resolveSession as F, resolveWebUrl as I, saveConfig as L, resolveAppUrl as M, resolveConfig as N, getShareMachineDefault as O, resolveManagementAuth as P, saveSession as R, getConfigPath as S, getPromptHistoryPath as T, API_KEY_PREFIX as _, runPrint as a, PREFERENCES as b, cardActionErrorMessage as c, reconcileMaskedInput as d, resolveConnectUrl as f, API_KEY_FAMILY_PREFIX as g, API_KEYS_URL as h, resolveAgent as i, getUpdateCheckDisabled as j, getStoredApiKeyId as k, parseExternalOauthConnectParams as l, specKeyFor as m, messageGet as n, toPrintError as o, parseConnectCard as p, readStdin as r, MASK_CHAR as s, collectRunText as t, parseOauthConnectParams as u, DEFAULT_API_URL as v, getPreference as w, deleteConfig as x, DEFAULT_APP_URL as y, saveTheme as z };
+export { getStoredApiKeyWorkspaceName as A, saveTheme as B, getLastSeenVersion as C, getSavedTheme as D, getReviewStateDir as E, resolveManagementAuth as F, resolveSession as I, resolveWebUrl as L, resolveAppUrl as M, resolveChatAuth as N, getShareMachineDefault as O, resolveConfig as P, saveConfig as R, getConfigPath as S, getPromptHistoryPath as T, setLastSeenVersion as V, API_KEY_PREFIX as _, runPrint as a, PREFERENCES as b, cardActionErrorMessage as c, reconcileMaskedInput as d, resolveConnectUrl as f, API_KEY_FAMILY_PREFIX as g, API_KEYS_URL as h, resolveAgent as i, getUpdateCheckDisabled as j, getStoredApiKeyId as k, parseExternalOauthConnectParams as l, specKeyFor as m, messageGet as n, toPrintError as o, parseConnectCard as p, readStdin as r, MASK_CHAR as s, collectRunText as t, parseOauthConnectParams as u, DEFAULT_API_URL as v, getPreference as w, deleteConfig as x, DEFAULT_APP_URL as y, saveSession as z };

package/dist/js/{print-CB9kyvkV.mjs → print-bhjVgVMK.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-Bmgp3ZT9.mjs";
+import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-Bs_6CrTC.mjs";
 import "./rest-BlN_uWmL.mjs";
 
 export { messageGet, readStdin, resolveAgent, runPrint };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skydive-cli",
-  "version": "0.3.0-beta.794",
+  "version": "0.3.0-beta.823",
   "description": "Skydive CLI — cloud agents from the command line",
   "homepage": "https://skydive.com",
   "license": "MIT",