skydive-cli 0.4.0-beta.1324 → 0.4.0-beta.1340

package/dist/js/{billing-blocked-euid6MN9.mjs → billing-blocked-Dgu5-oDy.mjs}

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
-import { a as billingBlockedOutcomeSchema, i as billingBlockedOutcomeFromSendResponse, n as BillingBlockedError, r as billingBlockedJsonResult, t as BILLING_BLOCKED_EXIT_CODE } from "./billing-blocked-CwfG1BTR.mjs";
+import { a as billingBlockedOutcomeSchema, i as billingBlockedOutcomeFromSendResponse, n as BillingBlockedError, r as billingBlockedJsonResult, t as BILLING_BLOCKED_EXIT_CODE } from "./billing-blocked-2wju4gC_.mjs";
 
 export { BILLING_BLOCKED_EXIT_CODE, BillingBlockedError, billingBlockedJsonResult };

package/dist/js/bin.mjs

@@ -1,12 +1,13 @@
 #!/usr/bin/env node
-import { C as ensureActiveOrganization, D as setActiveWorkspace, E as listWorkspaces, O as name, T as getSessionIdentity, a as installCrashHandler, k as version, t as maybeStartProfiling, u as brandHelpArt, w as getActiveWorkspaceId, x as themes } from "./profiler-pZXBjTHx.mjs";
-import { A as getStoredApiKeyWorkspaceName, C as getLastSeenVersion, F as resolveManagementAuth, I as resolveSession, M as resolveAppUrl, N as resolveChatAuth, O as getShareMachineDefault, P as resolveConfig, R as saveConfig, S as getConfigPath, T as getPromptHistoryPath, V as setLastSeenVersion, _ as API_KEY_PREFIX, b as PREFERENCES, g as API_KEY_FAMILY_PREFIX, h as API_KEYS_URL, i as resolveAgent, j as getUpdateCheckDisabled, k as getStoredApiKeyId, v as DEFAULT_API_URL, w as getPreference, x as deleteConfig, z as saveSession } from "./print-BaXFFR3b.mjs";
+import { C as ensureActiveOrganization, D as setActiveWorkspace, E as listWorkspaces, O as name, T as getSessionIdentity, a as installCrashHandler, k as version, t as maybeStartProfiling, u as brandHelpArt, w as getActiveWorkspaceId, x as themes } from "./profiler-BoPzxsbP.mjs";
+import { A as getStoredApiKeyWorkspaceName, C as getLastSeenVersion, F as resolveManagementAuth, I as resolveSession, M as resolveAppUrl, N as resolveChatAuth, O as getShareMachineDefault, P as resolveConfig, R as saveConfig, S as getConfigPath, T as getPromptHistoryPath, V as setLastSeenVersion, _ as API_KEY_PREFIX, b as PREFERENCES, g as API_KEY_FAMILY_PREFIX, h as API_KEYS_URL, i as resolveAgent, j as getUpdateCheckDisabled, k as getStoredApiKeyId, v as DEFAULT_API_URL, w as getPreference, x as deleteConfig, z as saveSession } from "./print-CbayCa87.mjs";
 import { n as printError, r as printTable, t as output } from "./output-DYzzdXYV.mjs";
-import { n as createRestClient, t as HttpError } from "./rest-D89MGnWD.mjs";
-import "./billing-blocked-CwfG1BTR.mjs";
-import { a as registerPortalDevice, i as grantPortalAccess, n as fetchPortalDevices, o as revokePortalAccess, r as findThisDevice, s as machineIdentity } from "./client-yn4bC-OV.mjs";
-import { c as PORTAL_DAEMON_FLAG, i as queryDaemonStatus, l as daemonPaths, n as ensureDaemonRunning, o as stopDaemon } from "./daemon-C0Qr2WSJ.mjs";
-import { t as SandboxStream } from "./client-D8s9vY4p.mjs";
+import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
+import { t as createRestClient } from "./rest-BY2nADw5.mjs";
+import "./billing-blocked-2wju4gC_.mjs";
+import { a as registerPortalDevice, c as machineIdentity, i as grantPortalAccess, n as fetchPortalDevices, o as revokePortalAccess, r as findThisDevice } from "./client-Cf7cvftg.mjs";
+import { c as PORTAL_DAEMON_FLAG, i as queryDaemonStatus, l as daemonPaths, n as ensureDaemonRunning, o as stopDaemon } from "./daemon-DaUaCMwC.mjs";
+import { t as SandboxStream } from "./client-Cn2af31H.mjs";
 import { hideBin } from "yargs/helpers";
 import yargs from "yargs";
 import os, { hostname } from "node:os";
@@ -1514,7 +1515,7 @@ const importCommand = {
 				process.exit(1);
 			}
 		}
-		const { runChat } = await import("./boot-BmzC25Rc.mjs");
+		const { runChat } = await import("./boot-Cz7I47B-.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
@@ -1541,7 +1542,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 		printError(`${session.error.message} For non-interactive use, run \`skydive auth login --web\` first, or set SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { connectMachineShare } = await import("./print-share-mBbyQQDb.mjs");
+	const { connectMachineShare } = await import("./print-share-CT4ltX7u.mjs");
 	const machineShare = await connectMachineShare({
 		appUrl,
 		sessionToken: session.value.sessionToken,
@@ -1549,7 +1550,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 	});
 	const extra = (argv.print ?? "").trim();
 	const prompt = buildImportSeedPrompt(process.cwd()) + (extra ? `\n\nAdditional instructions: ${extra}` : "");
-	const { runPrint } = await import("./print-CvB9w4jf.mjs");
+	const { runPrint } = await import("./print-ba_0hiV9.mjs");
 	try {
 		const result = await runPrint({
 			appUrl,
@@ -1926,7 +1927,7 @@ const chatCommand = {
 			sessionToken: auth.value.token,
 			agentSelector: argv.agent ?? null
 		});
-		const { runChat } = await import("./boot-BmzC25Rc.mjs");
+		const { runChat } = await import("./boot-Cz7I47B-.mjs");
 		await runChat({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -1993,7 +1994,7 @@ async function runPrintMode({ argv, appUrl }) {
 		printError(`${auth.error.message} For non-interactive use, run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { runPrint, readStdin } = await import("./print-CvB9w4jf.mjs");
+	const { runPrint, readStdin } = await import("./print-ba_0hiV9.mjs");
 	await ensureAgentWorkspace({
 		appUrl,
 		sessionToken: auth.value.token,
@@ -2018,7 +2019,7 @@ async function runPrintMode({ argv, appUrl }) {
 			process.exit(1);
 		}
 	} else {
-		const { connectMachineShare } = await import("./print-share-mBbyQQDb.mjs");
+		const { connectMachineShare } = await import("./print-share-CT4ltX7u.mjs");
 		machineShare = await connectMachineShare({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -2038,7 +2039,7 @@ async function runPrintMode({ argv, appUrl }) {
 		});
 		if (argv.json) output(argv, result);
 	} catch (error) {
-		const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-euid6MN9.mjs");
+		const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-Dgu5-oDy.mjs");
 		if (error instanceof BillingBlockedError) {
 			if (argv.json) output(argv, billingBlockedJsonResult(error, null));
 			printError(error.message);
@@ -2082,7 +2083,7 @@ const getCommand$1 = {
 			printError(`${auth.error.message} Run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 			process.exit(1);
 		}
-		const { messageGet } = await import("./print-CvB9w4jf.mjs");
+		const { messageGet } = await import("./print-ba_0hiV9.mjs");
 		try {
 			const result = await messageGet({
 				appUrl: auth.value.appUrl,
@@ -2092,7 +2093,7 @@ const getCommand$1 = {
 			});
 			if (argv.json) output(argv, result);
 		} catch (error) {
-			const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-euid6MN9.mjs");
+			const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-Dgu5-oDy.mjs");
 			if (error instanceof BillingBlockedError) {
 				if (argv.json) output(argv, billingBlockedJsonResult(error, argv["message-id"]));
 				printError(error.message);
@@ -2285,7 +2286,7 @@ const switchCommand = {
 				printError("The workspace picker needs the Bun runtime and it could not be set up automatically. Pass a workspace slug instead, or install Bun and retry.");
 				process.exit(1);
 			}
-			const { runWorkspacePicker } = await import("./boot-BmzC25Rc.mjs");
+			const { runWorkspacePicker } = await import("./boot-Cz7I47B-.mjs");
 			await runWorkspacePicker(session);
 			return;
 		}
@@ -2363,16 +2364,15 @@ const openCommand = {
 		const agent = argv.agent ? resolveAgent((await fetchPortalDevices(session)).agents, argv.agent) : null;
 		const cwd = argv.cwd ? path.resolve(argv.cwd) : process.cwd();
 		const { machineName } = machineIdentity();
-		const { PortalClient } = await import("./client-GNFwd8ou.mjs");
+		const { PortalDaemonClient } = await import("./daemon-client-DlblQIR9.mjs");
 		let lastLine = "";
 		let signalConnected;
 		const connected = new Promise((resolve) => {
 			signalConnected = resolve;
 		});
-		const client = new PortalClient({
+		const client = new PortalDaemonClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken,
-			resolveCwd: () => cwd,
 			onState: (state) => {
 				if (state.status === "connected") signalConnected();
 				const line = state.status === "error" ? `portal: connection error: ${state.error ?? "unknown"}; retrying` : `portal: ${state.status}`;
@@ -2388,6 +2388,8 @@ const openCommand = {
 		};
 		process.on("SIGINT", stop);
 		process.on("SIGTERM", stop);
+		await client.start();
+		client.setFallbackCwd(cwd);
 		client.enable();
 		await connected;
 		if (agent) {
@@ -2636,8 +2638,8 @@ const sandboxCommand = {
 	}).example("skydive sandbox --agent grace", "Live terminal (Ctrl-] detaches)").example("skydive sandbox --agent grace -- tail -n 50 /tmp/harness.log", "One-shot command (use `--` so its flags reach the sandbox)").example("skydive sandbox --agent grace -- sh -c 'ls /tmp | wc -l'", "Shell features go through an explicit `sh -c`"),
 	handler: async (argv) => {
 		const session = requireSession(argv);
-		const { createRestClient } = await import("./rest-D4gqf1ck.mjs");
-		const { resolveAgent } = await import("./print-CvB9w4jf.mjs");
+		const { createRestClient } = await import("./rest-DADJh0bi.mjs");
+		const { resolveAgent } = await import("./print-ba_0hiV9.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken
@@ -2706,7 +2708,7 @@ async function runPty({ session, agentId, agentName }) {
 		return 1;
 	}
 	console.error(`Connecting to ${agentName}'s sandbox… (Ctrl-] detaches)`);
-	const { runRawPtyPassthrough } = await import("./raw-pty-t5DC-e1T.mjs");
+	const { runRawPtyPassthrough } = await import("./raw-pty-3EkG-jjH.mjs");
 	const result = await runRawPtyPassthrough({
 		stdin: process.stdin,
 		stdout: process.stdout,
@@ -3896,7 +3898,7 @@ if (process.argv.includes(UPDATE_WORKER_FLAG)) {
 	process.exit(0);
 }
 if (process.argv.includes(PORTAL_DAEMON_FLAG)) {
-	const { runPortalDaemon } = await import("./daemon-C_h_KgJC.mjs");
+	const { runPortalDaemon } = await import("./daemon-imLBqTGg.mjs");
 	runPortalDaemon(process.argv);
 } else runCli();
 function runCli() {

package/dist/js/{boot-BmzC25Rc.mjs → boot-Cz7I47B-.mjs}

@@ -1,12 +1,14 @@
 #!/usr/bin/env node
-import { D as setActiveWorkspace, E as listWorkspaces, S as themesForMode, _ as themeForMode, a as installCrashHandler, b as themeVersion, c as MARK_CELLS, d as DEFAULT_THEME_ID, f as applyTheme, g as theme, h as noColorRequested, i as writeArtifact, l as WORDMARK, m as monoTheme, n as profilingEnabled, o as buildCrashReport, p as findTheme, r as record, s as writeCrashReport, v as themeMode, w as getActiveWorkspaceId, y as themeModeFromColorFgBg } from "./profiler-pZXBjTHx.mjs";
-import { B as saveTheme, D as getSavedTheme, E as getReviewStateDir, L as resolveWebUrl, S as getConfigPath, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, i as resolveAgent, l as parseExternalOauthConnectParams, m as specKeyFor, p as parseConnectCard, s as MASK_CHAR, u as parseOauthConnectParams, v as DEFAULT_API_URL, y as DEFAULT_APP_URL } from "./print-BaXFFR3b.mjs";
-import { a as errorMessage, i as sendErrorMessage, n as createRestClient, o as isRecord, r as errorDetail, t as HttpError } from "./rest-D89MGnWD.mjs";
-import { i as billingBlockedOutcomeFromSendResponse } from "./billing-blocked-CwfG1BTR.mjs";
-import { t as PortalClient } from "./client-yn4bC-OV.mjs";
-import { d as makeLineParser, f as parseDaemonMessage, l as daemonPaths, n as ensureDaemonRunning, s as LOCAL_PROTOCOL_VERSION, u as encodeLine } from "./daemon-C0Qr2WSJ.mjs";
-import { t as SandboxStream } from "./client-D8s9vY4p.mjs";
-import { t as runRawPtyPassthrough } from "./raw-pty-DAmb8uqt.mjs";
+import { D as setActiveWorkspace, E as listWorkspaces, S as themesForMode, _ as themeForMode, a as installCrashHandler, b as themeVersion, c as MARK_CELLS, d as DEFAULT_THEME_ID, f as applyTheme, g as theme, h as noColorRequested, i as writeArtifact, l as WORDMARK, m as monoTheme, n as profilingEnabled, o as buildCrashReport, p as findTheme, r as record, s as writeCrashReport, v as themeMode, w as getActiveWorkspaceId, y as themeModeFromColorFgBg } from "./profiler-BoPzxsbP.mjs";
+import { B as saveTheme, D as getSavedTheme, E as getReviewStateDir, L as resolveWebUrl, S as getConfigPath, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, i as resolveAgent, l as parseExternalOauthConnectParams, m as specKeyFor, p as parseConnectCard, s as MASK_CHAR, u as parseOauthConnectParams, v as DEFAULT_API_URL, y as DEFAULT_APP_URL } from "./print-CbayCa87.mjs";
+import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
+import { a as isRecord, i as errorMessage, n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-BY2nADw5.mjs";
+import { i as billingBlockedOutcomeFromSendResponse } from "./billing-blocked-2wju4gC_.mjs";
+import { t as PortalClient } from "./client-Cf7cvftg.mjs";
+import "./daemon-DaUaCMwC.mjs";
+import { t as SandboxStream } from "./client-Cn2af31H.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-CJxbCLOb.mjs";
+import { t as runRawPtyPassthrough } from "./raw-pty-B6mAroiI.mjs";
 import * as os$1 from "node:os";
 import { homedir, platform, release, tmpdir } from "node:os";
 import path, { basename, extname, isAbsolute, join, win32 } from "node:path";
@@ -14,7 +16,7 @@ import { z } from "zod";
 import open from "open";
 import { constants } from "node:fs";
 import { execFile, spawn } from "node:child_process";
-import { createHash, randomUUID } from "node:crypto";
+import { createHash } from "node:crypto";
 import { connect, createConnection } from "node:net";
 import { access, appendFile, mkdir, mkdtemp, readFile, readdir, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import { MarkdownRenderable, RenderableEvents, StyledText, SyntaxStyle, addDefaultParsers, createCliRenderer, decodePasteBytes, detectLinks, fg, link } from "@opentui/core";
@@ -293,152 +295,7 @@ async function resolveInitialScreen({ rest, agentSelector, conversationId, newCo
 }
 
 //#endregion
-//#region src/chat/portal/daemon-client.ts
-var PortalDaemonClient = class {
-	sessionId = randomUUID();
-	socket = null;
-	disposed = false;
-	reconnectTimer = null;
-	lastBind = null;
-	wantEnabled = false;
-	pendingGrants = /* @__PURE__ */ new Set();
-	grantedAgentIds = /* @__PURE__ */ new Set();
-	constructor(opts) {
-		this.opts = opts;
-	}
-	/** Spawn the daemon if needed and attach. Idempotent. */
-	async start() {
-		if (this.disposed) return;
-		await ensureDaemonRunning(this.opts.appUrl);
-		this.connect();
-	}
-	connect() {
-		if (this.disposed) return;
-		const { socketPath } = daemonPaths(this.opts.appUrl);
-		const socket = connect(socketPath);
-		socket.setEncoding("utf8");
-		this.socket = socket;
-		const parse = makeLineParser();
-		socket.on("connect", () => {
-			this.send({
-				t: "hello",
-				v: LOCAL_PROTOCOL_VERSION,
-				sessionId: this.sessionId,
-				token: this.opts.sessionToken
-			});
-			if (this.wantEnabled) this.send({ t: "enable" });
-			if (this.lastBind) this.send({
-				t: "bind",
-				sessionId: this.sessionId,
-				conversationId: this.lastBind.conversationId,
-				cwd: this.lastBind.cwd
-			});
-			for (const agentId of this.pendingGrants) this.send({
-				t: "grant",
-				agentId
-			});
-		});
-		socket.on("data", (chunk) => {
-			for (const line of parse(chunk)) {
-				const msg = parseDaemonMessage(line);
-				if (msg) this.onMessage(msg);
-			}
-		});
-		const onClose = () => {
-			if (this.socket === socket) this.socket = null;
-			this.scheduleReconnect();
-		};
-		socket.on("close", onClose);
-		socket.on("error", onClose);
-	}
-	scheduleReconnect() {
-		if (this.disposed || this.reconnectTimer) return;
-		this.reconnectTimer = setTimeout(() => {
-			this.reconnectTimer = null;
-			this.start();
-		}, 500);
-		this.reconnectTimer.unref();
-	}
-	onMessage(msg) {
-		if (msg.t === "state") {
-			this.grantedAgentIds = new Set(msg.grantedAgentIds);
-			this.opts.onState({
-				status: msg.status,
-				machineName: msg.machineName,
-				friendlyName: msg.friendlyName,
-				error: msg.error,
-				grantedAgentIds: msg.grantedAgentIds
-			});
-		}
-	}
-	/** Whether this agent is currently authorized on the machine (last daemon state). */
-	isGranted(agentId) {
-		return this.grantedAgentIds.has(agentId);
-	}
-	/** Whether the user has turned machine sharing on from this CLI. */
-	isEnabled() {
-		return this.wantEnabled;
-	}
-	send(msg) {
-		if (this.socket?.writable) this.socket.write(encodeLine(msg));
-	}
-	/** Turn machine sharing on (the daemon connects the portal). */
-	enable() {
-		this.wantEnabled = true;
-		this.send({ t: "enable" });
-	}
-	/** Turn machine sharing off. */
-	disable() {
-		this.wantEnabled = false;
-		this.send({ t: "disable" });
-	}
-	/** Register / update this conversation's working directory for exec routing. */
-	bind(conversationId, cwd) {
-		this.lastBind = {
-			conversationId,
-			cwd
-		};
-		this.send({
-			t: "bind",
-			sessionId: this.sessionId,
-			conversationId,
-			cwd
-		});
-	}
-	/**
-	* Authorize one agent to run commands on this machine. Resolves once the
-	* request is sent to the daemon (the daemon performs the grant and pushes the
-	* updated state); kept async so it's a drop-in for the old in-process client's
-	* awaited `grantAgent`.
-	*/
-	grantAgent(agentId) {
-		this.pendingGrants.add(agentId);
-		this.send({
-			t: "grant",
-			agentId
-		});
-		return Promise.resolve();
-	}
-	/** Detach this CLI. The daemon keeps running for other clients. */
-	dispose() {
-		this.disposed = true;
-		if (this.reconnectTimer) {
-			clearTimeout(this.reconnectTimer);
-			this.reconnectTimer = null;
-		}
-		this.send({
-			t: "bye",
-			sessionId: this.sessionId
-		});
-		try {
-			this.socket?.destroy();
-		} catch (_error) {}
-		this.socket = null;
-	}
-};
-
-//#endregion
-//#region src/chat/portal/create-portal-client.ts
+//#region ../portal-daemon/src/create-portal-client.ts
 /**
 * Escape hatch: setting `SKYDIVE_NO_DAEMON` (to any non-empty value)
 * makes the CLI bypass the portal daemon and open the portal connection

package/dist/js/{client-yn4bC-OV.mjs → client-Cf7cvftg.mjs}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
-import { a as errorMessage, t as HttpError } from "./rest-D89MGnWD.mjs";
+import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
 import os from "node:os";
 import { z } from "zod";
 import { spawn } from "node:child_process";
 import { WebSocket } from "ws";
 
-//#region src/chat/portal/machine.ts
+//#region ../portal-daemon/src/machine.ts
 /**
 * Identity this machine registers under when the CLI shares it via the portal.
 *
@@ -60,6 +60,19 @@ function portalWsUrl(appUrl, machine, label) {
 	return url.toString();
 }
 
+//#endregion
+//#region ../portal-daemon/src/util.ts
+/** Narrowing helper for the unknown JSON payloads the daemon reads (persisted
+* state, wire frames). A type predicate (not an `as` cast), so call sites can
+* read properties without asserting. */
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Best-effort message from an unknown thrown value. */
+function errorMessage(err) {
+	return err instanceof Error ? err.message : String(err);
+}
+
 //#endregion
 //#region ../portal-protocol/src/index.ts
 const MAX_WS_FRAME_BYTES = 16 * 1024 * 1024;
@@ -126,7 +139,7 @@ function decodeFrame(frame) {
 }
 
 //#endregion
-//#region src/chat/portal/exec.ts
+//#region ../portal-daemon/src/exec.ts
 /**
 * Runs portal `exec` directives locally. Each `open` spawns a child process
 * whose stdout/stderr stream back as data frames and whose stdin is fed by
@@ -252,7 +265,7 @@ var JobManager = class {
 };
 
 //#endregion
-//#region src/chat/portal/api.ts
+//#region ../portal-daemon/src/api.ts
 /**
 * The portal's session-authed REST surface, shared by `PortalClient` (the
 * TUI/`portal open` connection) and the `skydive portal` management
@@ -335,7 +348,7 @@ function findThisDevice(devices, machineName) {
 }
 
 //#endregion
-//#region src/chat/portal/client.ts
+//#region ../portal-daemon/src/client.ts
 const INITIAL_BACKOFF_MS = 500;
 const MAX_BACKOFF_MS = 1e4;
 /**
@@ -503,4 +516,4 @@ function sleep(ms) {
 }
 
 //#endregion
-export { registerPortalDevice as a, grantPortalAccess as i, fetchPortalDevices as n, revokePortalAccess as o, findThisDevice as r, machineIdentity as s, PortalClient as t };
+export { registerPortalDevice as a, machineIdentity as c, grantPortalAccess as i, fetchPortalDevices as n, revokePortalAccess as o, findThisDevice as r, isRecord as s, PortalClient as t };

package/dist/js/client-CneLVPei.mjs

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { t as PortalClient } from "./client-Cf7cvftg.mjs";
+
+export { PortalClient };

package/dist/js/{daemon-C0Qr2WSJ.mjs → daemon-DaUaCMwC.mjs}

@@ -1,6 +1,5 @@
 #!/usr/bin/env node
-import { o as isRecord } from "./rest-D89MGnWD.mjs";
-import { t as PortalClient } from "./client-yn4bC-OV.mjs";
+import { s as isRecord, t as PortalClient } from "./client-Cf7cvftg.mjs";
 import os from "node:os";
 import path from "node:path";
 import { z } from "zod";
@@ -9,7 +8,7 @@ import { createHash } from "node:crypto";
 import { connect, createServer } from "node:net";
 import { access, appendFile, mkdir, readFile, unlink, writeFile } from "node:fs/promises";
 
-//#region src/chat/portal/local-protocol.ts
+//#region ../portal-daemon/src/local-protocol.ts
 /**
 * Local IPC between the portal DAEMON and the `skydive` CLI processes attached
 * to it, on one host.
@@ -96,6 +95,15 @@ const clientBindSchema = z.object({
 /** `enable`/`disable` — turn machine sharing on/off (user-initiated). */
 const clientEnableSchema = z.object({ t: z.literal("enable") });
 const clientDisableSchema = z.object({ t: z.literal("disable") });
+/**
+* `cwd` — set the directory an exec runs in when its conversation is unknown.
+* `skydive portal open` has no conversation of its own: it shares the machine
+* for one directory, so it sets the fallback directly instead of binding.
+*/
+const clientCwdSchema = z.object({
+	t: z.literal("cwd"),
+	cwd: z.string().min(1)
+});
 /** `grant` — authorize one agent to reach this machine (user-initiated). */
 const clientGrantSchema = z.object({
 	t: z.literal("grant"),
@@ -123,6 +131,7 @@ const clientMessageSchema = z.discriminatedUnion("t", [
 	clientBindSchema,
 	clientEnableSchema,
 	clientDisableSchema,
+	clientCwdSchema,
 	clientGrantSchema,
 	clientByeSchema,
 	clientStatusSchema,
@@ -220,7 +229,7 @@ function parseDaemonMessage(line) {
 }
 
 //#endregion
-//#region src/chat/portal/daemon.ts
+//#region ../portal-daemon/src/daemon.ts
 /**
 * The portal DAEMON: one long-lived process per (user, appUrl) that owns the
 * SINGLE portal WebSocket to the server and is the only writer of the machine's
@@ -290,7 +299,8 @@ var PortalDaemon = class {
 		const conn = {
 			socket,
 			sessionId: null,
-			conversations: /* @__PURE__ */ new Set()
+			conversations: /* @__PURE__ */ new Set(),
+			wantsShare: false
 		};
 		this.conns.add(conn);
 		this.clearIdleTimer();
@@ -324,12 +334,17 @@ var PortalDaemon = class {
 				this.persistState();
 				return;
 			case "enable":
+				conn.wantsShare = true;
 				this.ensureClient();
 				this.client?.enable();
 				return;
 			case "disable":
+				for (const other of this.conns) other.wantsShare = false;
 				this.client?.disable();
 				return;
+			case "cwd":
+				this.fallbackCwd = msg.cwd;
+				return;
 			case "grant":
 				this.ensureClient();
 				this.client?.grantAgent(msg.agentId).catch((error) => {
@@ -354,6 +369,8 @@ var PortalDaemon = class {
 		try {
 			conn.socket.destroy();
 		} catch (_error) {}
+		conn.wantsShare = false;
+		if (![...this.conns].some((c) => c.wantsShare)) this.client?.disable();
 		if (this.conns.size === 0) this.armIdleTimer();
 	}
 	/** Create the single PortalClient the first time a client needs the portal. */

package/dist/js/daemon-client-CJxbCLOb.mjs

@@ -0,0 +1,168 @@
+#!/usr/bin/env node
+import { d as makeLineParser, f as parseDaemonMessage, l as daemonPaths, n as ensureDaemonRunning, s as LOCAL_PROTOCOL_VERSION, u as encodeLine } from "./daemon-DaUaCMwC.mjs";
+import { randomUUID } from "node:crypto";
+import { connect } from "node:net";
+
+//#region ../portal-daemon/src/daemon-client.ts
+var PortalDaemonClient = class {
+	sessionId = randomUUID();
+	socket = null;
+	disposed = false;
+	reconnectTimer = null;
+	lastBind = null;
+	fallbackCwd = null;
+	wantEnabled = false;
+	pendingGrants = /* @__PURE__ */ new Set();
+	grantedAgentIds = /* @__PURE__ */ new Set();
+	constructor(opts) {
+		this.opts = opts;
+	}
+	/** Spawn the daemon if needed and attach. Idempotent. */
+	async start() {
+		if (this.disposed) return;
+		await ensureDaemonRunning(this.opts.appUrl);
+		this.connect();
+	}
+	connect() {
+		if (this.disposed) return;
+		const { socketPath } = daemonPaths(this.opts.appUrl);
+		const socket = connect(socketPath);
+		socket.setEncoding("utf8");
+		this.socket = socket;
+		const parse = makeLineParser();
+		socket.on("connect", () => {
+			this.send({
+				t: "hello",
+				v: LOCAL_PROTOCOL_VERSION,
+				sessionId: this.sessionId,
+				token: this.opts.sessionToken
+			});
+			if (this.wantEnabled) this.send({ t: "enable" });
+			if (this.fallbackCwd) this.send({
+				t: "cwd",
+				cwd: this.fallbackCwd
+			});
+			if (this.lastBind) this.send({
+				t: "bind",
+				sessionId: this.sessionId,
+				conversationId: this.lastBind.conversationId,
+				cwd: this.lastBind.cwd
+			});
+			for (const agentId of this.pendingGrants) this.send({
+				t: "grant",
+				agentId
+			});
+		});
+		socket.on("data", (chunk) => {
+			for (const line of parse(chunk)) {
+				const msg = parseDaemonMessage(line);
+				if (msg) this.onMessage(msg);
+			}
+		});
+		const onClose = () => {
+			if (this.socket === socket) this.socket = null;
+			this.scheduleReconnect();
+		};
+		socket.on("close", onClose);
+		socket.on("error", onClose);
+	}
+	scheduleReconnect() {
+		if (this.disposed || this.reconnectTimer) return;
+		this.reconnectTimer = setTimeout(() => {
+			this.reconnectTimer = null;
+			this.start();
+		}, 500);
+		this.reconnectTimer.unref();
+	}
+	onMessage(msg) {
+		if (msg.t === "state") {
+			this.grantedAgentIds = new Set(msg.grantedAgentIds);
+			this.opts.onState({
+				status: msg.status,
+				machineName: msg.machineName,
+				friendlyName: msg.friendlyName,
+				error: msg.error,
+				grantedAgentIds: msg.grantedAgentIds
+			});
+		}
+	}
+	/** Whether this agent is currently authorized on the machine (last daemon state). */
+	isGranted(agentId) {
+		return this.grantedAgentIds.has(agentId);
+	}
+	/** Whether the user has turned machine sharing on from this CLI. */
+	isEnabled() {
+		return this.wantEnabled;
+	}
+	send(msg) {
+		if (this.socket?.writable) this.socket.write(encodeLine(msg));
+	}
+	/** Turn machine sharing on (the daemon connects the portal). */
+	enable() {
+		this.wantEnabled = true;
+		this.send({ t: "enable" });
+	}
+	/** Turn machine sharing off. */
+	disable() {
+		this.wantEnabled = false;
+		this.send({ t: "disable" });
+	}
+	/**
+	* Set the directory an exec runs in when the daemon can't place its
+	* conversation. `skydive portal open` shares one directory and has no
+	* conversation of its own, so this is how it routes.
+	*/
+	setFallbackCwd(cwd) {
+		this.fallbackCwd = cwd;
+		this.send({
+			t: "cwd",
+			cwd
+		});
+	}
+	/** Register / update this conversation's working directory for exec routing. */
+	bind(conversationId, cwd) {
+		this.lastBind = {
+			conversationId,
+			cwd
+		};
+		this.send({
+			t: "bind",
+			sessionId: this.sessionId,
+			conversationId,
+			cwd
+		});
+	}
+	/**
+	* Authorize one agent to run commands on this machine. Resolves once the
+	* request is sent to the daemon (the daemon performs the grant and pushes the
+	* updated state); kept async so it's a drop-in for the old in-process client's
+	* awaited `grantAgent`.
+	*/
+	grantAgent(agentId) {
+		this.pendingGrants.add(agentId);
+		this.send({
+			t: "grant",
+			agentId
+		});
+		return Promise.resolve();
+	}
+	/** Detach this CLI. The daemon keeps running for other clients. */
+	dispose() {
+		this.disposed = true;
+		if (this.reconnectTimer) {
+			clearTimeout(this.reconnectTimer);
+			this.reconnectTimer = null;
+		}
+		this.send({
+			t: "bye",
+			sessionId: this.sessionId
+		});
+		try {
+			this.socket?.destroy();
+		} catch (_error) {}
+		this.socket = null;
+	}
+};
+
+//#endregion
+export { PortalDaemonClient as t };

package/dist/js/daemon-client-DlblQIR9.mjs

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+import "./client-Cf7cvftg.mjs";
+import "./daemon-DaUaCMwC.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-CJxbCLOb.mjs";
+
+export { PortalDaemonClient };

package/dist/js/daemon-imLBqTGg.mjs

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import "./client-Cf7cvftg.mjs";
+import { a as runPortalDaemon, i as queryDaemonStatus, n as ensureDaemonRunning, o as stopDaemon, r as isDaemonListening, t as PortalDaemon } from "./daemon-DaUaCMwC.mjs";
+
+export { runPortalDaemon };

package/dist/js/http-error-DzyrsLAZ.mjs

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+//#region ../portal-daemon/src/http-error.ts
+/**
+* HTTP failure that keeps the FULL response body. The message self-clips to
+* 200 chars because it flows into logs and one-line UIs; consumers that can
+* afford the whole body (an expandable transcript block) read `body` directly.
+* The CLI re-exports this class from its REST layer so `instanceof` checks
+* hold across both surfaces.
+*/
+var HttpError = class extends Error {
+	constructor(status, body) {
+		super(`HTTP ${status}: ${body.slice(0, 200)}`);
+		this.status = status;
+		this.body = body;
+		this.name = "HttpError";
+	}
+};
+
+//#endregion
+export { HttpError as t };

package/dist/js/{print-BaXFFR3b.mjs → print-CbayCa87.mjs}

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
-import { a as errorMessage, i as sendErrorMessage, n as createRestClient, o as isRecord, t as HttpError } from "./rest-D89MGnWD.mjs";
-import { i as billingBlockedOutcomeFromSendResponse, n as BillingBlockedError } from "./billing-blocked-CwfG1BTR.mjs";
+import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
+import { a as isRecord, i as errorMessage, r as sendErrorMessage, t as createRestClient } from "./rest-BY2nADw5.mjs";
+import { i as billingBlockedOutcomeFromSendResponse, n as BillingBlockedError } from "./billing-blocked-2wju4gC_.mjs";
 import path from "node:path";
 import Conf from "conf";
 import { err, ok } from "neverthrow";

package/dist/js/{print-CvB9w4jf.mjs → print-ba_0hiV9.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-BaXFFR3b.mjs";
-import "./rest-D89MGnWD.mjs";
-import "./billing-blocked-CwfG1BTR.mjs";
+import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-CbayCa87.mjs";
+import "./rest-BY2nADw5.mjs";
+import "./billing-blocked-2wju4gC_.mjs";
 
 export { messageGet, readStdin, resolveAgent, runPrint };

package/dist/js/{print-share-mBbyQQDb.mjs → print-share-CT4ltX7u.mjs}

@@ -14,7 +14,7 @@ import { n as printError } from "./output-DYzzdXYV.mjs";
 * the reply (and to --json).
 */
 async function connectMachineShare({ appUrl, sessionToken, timeoutHint }) {
-	const { PortalClient } = await import("./client-GNFwd8ou.mjs");
+	const { PortalClient } = await import("./client-CneLVPei.mjs");
 	let signalConnected;
 	const connected = new Promise((resolve) => {
 		signalConnected = resolve;

package/dist/js/{profiler-pZXBjTHx.mjs → profiler-BoPzxsbP.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { S as getConfigPath } from "./print-BaXFFR3b.mjs";
+import { S as getConfigPath } from "./print-CbayCa87.mjs";
 import os from "node:os";
 import path from "node:path";
 import { err, ok } from "neverthrow";
@@ -8,7 +8,7 @@ import fs from "node:fs";
 
 //#region package.json
 var name = "skydive-cli";
-var version$1 = "0.4.0-beta.1324";
+var version$1 = "0.4.0-beta.1340";
 
 //#endregion
 //#region src/auth/organization.ts

package/dist/js/raw-pty-3EkG-jjH.mjs

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import "./client-Cn2af31H.mjs";
+import { t as runRawPtyPassthrough } from "./raw-pty-B6mAroiI.mjs";
+
+export { runRawPtyPassthrough };

package/dist/js/{raw-pty-DAmb8uqt.mjs → raw-pty-B6mAroiI.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as SandboxStream } from "./client-D8s9vY4p.mjs";
+import { t as SandboxStream } from "./client-Cn2af31H.mjs";
 
 //#region src/chat/sandbox/raw-pty.ts
 /**

package/dist/js/{rest-D89MGnWD.mjs → rest-BY2nADw5.mjs}

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
-import { a as billingBlockedOutcomeSchema } from "./billing-blocked-CwfG1BTR.mjs";
+import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
+import { a as billingBlockedOutcomeSchema } from "./billing-blocked-2wju4gC_.mjs";
 import { z } from "zod";
 import { createParser } from "eventsource-parser";
 
@@ -17,14 +18,6 @@ function errorMessage(err) {
 
 //#endregion
 //#region src/chat/api/rest.ts
-var HttpError = class extends Error {
-	constructor(status, body) {
-		super(`HTTP ${status}: ${body.slice(0, 200)}`);
-		this.status = status;
-		this.body = body;
-		this.name = "HttpError";
-	}
-};
 const ERROR_DETAIL_MAX_BODY = 2e3;
 /**
 * Fullest renderable text for a thrown value. `HttpError.message` clips the
@@ -614,4 +607,4 @@ const conversationStreamEventSchema = z.discriminatedUnion("kind", [
 ]);
 
 //#endregion
-export { errorMessage as a, sendErrorMessage as i, createRestClient as n, isRecord as o, errorDetail as r, HttpError as t };
+export { isRecord as a, errorMessage as i, errorDetail as n, sendErrorMessage as r, createRestClient as t };

package/dist/js/rest-DADJh0bi.mjs

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
+import { n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-BY2nADw5.mjs";
+import "./billing-blocked-2wju4gC_.mjs";
+
+export { createRestClient };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skydive-cli",
-  "version": "0.4.0-beta.1324",
+  "version": "0.4.0-beta.1340",
   "description": "Skydive CLI — cloud agents from the command line",
   "homepage": "https://skydive.com",
   "license": "MIT",
@@ -48,7 +48,7 @@
     "zustand": "^5.0.2"
   },
   "devDependencies": {
-    "@createinc/anyone-portal-protocol": "0.0.0",
+    "@createinc/anyone-portal-daemon": "0.0.0",
     "@createinc/anyone-sandbox-stream-protocol": "0.0.0",
     "@createinc/tsconfig": "0.0.0",
     "@types/bun": "^1.3.14",

package/dist/js/client-GNFwd8ou.mjs

@@ -1,6 +0,0 @@
-#!/usr/bin/env node
-import "./rest-D89MGnWD.mjs";
-import "./billing-blocked-CwfG1BTR.mjs";
-import { t as PortalClient } from "./client-yn4bC-OV.mjs";
-
-export { PortalClient };

package/dist/js/daemon-C_h_KgJC.mjs

@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-import "./rest-D89MGnWD.mjs";
-import "./billing-blocked-CwfG1BTR.mjs";
-import "./client-yn4bC-OV.mjs";
-import { a as runPortalDaemon, i as queryDaemonStatus, n as ensureDaemonRunning, o as stopDaemon, r as isDaemonListening, t as PortalDaemon } from "./daemon-C0Qr2WSJ.mjs";
-
-export { runPortalDaemon };

package/dist/js/raw-pty-t5DC-e1T.mjs

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-import "./client-D8s9vY4p.mjs";
-import { t as runRawPtyPassthrough } from "./raw-pty-DAmb8uqt.mjs";
-
-export { runRawPtyPassthrough };

package/dist/js/rest-D4gqf1ck.mjs

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-import { i as sendErrorMessage, n as createRestClient, r as errorDetail, t as HttpError } from "./rest-D89MGnWD.mjs";
-import "./billing-blocked-CwfG1BTR.mjs";
-
-export { createRestClient };