skydive-cli 0.4.0-beta.1332 → 0.4.0-beta.1352

package/CHANGELOG.md

@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- `skydive fs` — a namespace for working with the files on an agent's computer (its sandbox) from your own machine. Its first subcommand, `skydive fs edit <path>`, reads a remote file down over the same relay `skydive sandbox` uses, opens it in your local editor (`$VISUAL`/`$EDITOR`, override with `--editor`, defaults to `vi`), and writes your changes back atomically when you save and close — so you can edit a remote file as if it were local without opening the chat TUI. A path that doesn't exist yet is created on save; no changes means nothing is written. Access is gated on EDIT permission for the agent, exactly like `skydive sandbox`. (A first-class `fs` relay channel and `skydive fs mount` land in follow-ups.)
+
 ## [0.4.0] - 2026-08-07
 
 ### Added

package/dist/js/bin.mjs

@@ -1,25 +1,26 @@
 #!/usr/bin/env node
-import { C as ensureActiveOrganization, D as setActiveWorkspace, E as listWorkspaces, O as name, T as getSessionIdentity, a as installCrashHandler, k as version, t as maybeStartProfiling, u as brandHelpArt, w as getActiveWorkspaceId, x as themes } from "./profiler-Dh7VeDnQ.mjs";
+import { C as ensureActiveOrganization, D as setActiveWorkspace, E as listWorkspaces, O as name, T as getSessionIdentity, a as installCrashHandler, k as version, t as maybeStartProfiling, u as brandHelpArt, w as getActiveWorkspaceId, x as themes } from "./profiler-CZtc7-p8.mjs";
 import { A as getStoredApiKeyWorkspaceName, C as getLastSeenVersion, F as resolveManagementAuth, I as resolveSession, M as resolveAppUrl, N as resolveChatAuth, O as getShareMachineDefault, P as resolveConfig, R as saveConfig, S as getConfigPath, T as getPromptHistoryPath, V as setLastSeenVersion, _ as API_KEY_PREFIX, b as PREFERENCES, g as API_KEY_FAMILY_PREFIX, h as API_KEYS_URL, i as resolveAgent, j as getUpdateCheckDisabled, k as getStoredApiKeyId, v as DEFAULT_API_URL, w as getPreference, x as deleteConfig, z as saveSession } from "./print-CbayCa87.mjs";
 import { n as printError, r as printTable, t as output } from "./output-DYzzdXYV.mjs";
 import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
 import { t as createRestClient } from "./rest-BY2nADw5.mjs";
 import "./billing-blocked-2wju4gC_.mjs";
 import { a as registerPortalDevice, c as machineIdentity, i as grantPortalAccess, n as fetchPortalDevices, o as revokePortalAccess, r as findThisDevice } from "./client-Cf7cvftg.mjs";
-import { c as PORTAL_DAEMON_FLAG, i as queryDaemonStatus, l as daemonPaths, n as ensureDaemonRunning, o as stopDaemon } from "./daemon-DOWC0OOB.mjs";
+import { c as PORTAL_DAEMON_FLAG, i as queryDaemonStatus, l as daemonPaths, n as ensureDaemonRunning, o as stopDaemon } from "./daemon-DaUaCMwC.mjs";
 import { t as SandboxStream } from "./client-Cn2af31H.mjs";
 import { hideBin } from "yargs/helpers";
 import yargs from "yargs";
-import os, { hostname } from "node:os";
-import path from "node:path";
+import os, { hostname, tmpdir } from "node:os";
+import path, { join } from "node:path";
 import { err, ok } from "neverthrow";
 import { z } from "zod";
 import open from "open";
 import fs from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
-import { createHash } from "node:crypto";
+import { createHash, randomBytes } from "node:crypto";
 import zlib from "node:zlib";
-import fsp from "node:fs/promises";
+import fsp, { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { quote } from "shell-quote";
 import semver from "semver";
 import { createInterface } from "node:readline";
 
@@ -1515,7 +1516,7 @@ const importCommand = {
 				process.exit(1);
 			}
 		}
-		const { runChat } = await import("./boot-Cw_SOMZH.mjs");
+		const { runChat } = await import("./boot-D4tjj6LN.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
@@ -1542,7 +1543,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 		printError(`${session.error.message} For non-interactive use, run \`skydive auth login --web\` first, or set SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { connectMachineShare } = await import("./print-share-BBz_FpXL.mjs");
+	const { connectMachineShare } = await import("./print-share-CT4ltX7u.mjs");
 	const machineShare = await connectMachineShare({
 		appUrl,
 		sessionToken: session.value.sessionToken,
@@ -1927,7 +1928,7 @@ const chatCommand = {
 			sessionToken: auth.value.token,
 			agentSelector: argv.agent ?? null
 		});
-		const { runChat } = await import("./boot-Cw_SOMZH.mjs");
+		const { runChat } = await import("./boot-D4tjj6LN.mjs");
 		await runChat({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -2019,7 +2020,7 @@ async function runPrintMode({ argv, appUrl }) {
 			process.exit(1);
 		}
 	} else {
-		const { connectMachineShare } = await import("./print-share-BBz_FpXL.mjs");
+		const { connectMachineShare } = await import("./print-share-CT4ltX7u.mjs");
 		machineShare = await connectMachineShare({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -2286,7 +2287,7 @@ const switchCommand = {
 				printError("The workspace picker needs the Bun runtime and it could not be set up automatically. Pass a workspace slug instead, or install Bun and retry.");
 				process.exit(1);
 			}
-			const { runWorkspacePicker } = await import("./boot-Cw_SOMZH.mjs");
+			const { runWorkspacePicker } = await import("./boot-D4tjj6LN.mjs");
 			await runWorkspacePicker(session);
 			return;
 		}
@@ -2364,16 +2365,15 @@ const openCommand = {
 		const agent = argv.agent ? resolveAgent((await fetchPortalDevices(session)).agents, argv.agent) : null;
 		const cwd = argv.cwd ? path.resolve(argv.cwd) : process.cwd();
 		const { machineName } = machineIdentity();
-		const { PortalClient } = await import("./client-CneLVPei.mjs");
+		const { PortalDaemonClient } = await import("./daemon-client-DlblQIR9.mjs");
 		let lastLine = "";
 		let signalConnected;
 		const connected = new Promise((resolve) => {
 			signalConnected = resolve;
 		});
-		const client = new PortalClient({
+		const client = new PortalDaemonClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken,
-			resolveCwd: () => cwd,
 			onState: (state) => {
 				if (state.status === "connected") signalConnected();
 				const line = state.status === "error" ? `portal: connection error: ${state.error ?? "unknown"}; retrying` : `portal: ${state.status}`;
@@ -2389,6 +2389,8 @@ const openCommand = {
 		};
 		process.on("SIGINT", stop);
 		process.on("SIGTERM", stop);
+		await client.start();
+		client.setFallbackCwd(cwd);
 		client.enable();
 		await connected;
 		if (agent) {
@@ -2599,7 +2601,7 @@ const portalCommand = {
 //#endregion
 //#region src/commands/sandbox.ts
 /** POSIX single-quote one word so the remote shell treats it as one token. */
-function shellQuote(word) {
+function shellQuote$1(word) {
 	if (/^[A-Za-z0-9_@%+=:,./-]+$/.test(word)) return word;
 	return `'${word.replace(/'/g, `'\\''`)}'`;
 }
@@ -2614,7 +2616,7 @@ function shellQuote(word) {
 * for too. yargs number-coerces bare numerals, so words are stringified.
 */
 function joinCommandWords(words) {
-	return words.map(String).map(shellQuote).join(" ").trim();
+	return words.map(String).map(shellQuote$1).join(" ").trim();
 }
 /**
 * `skydive sandbox` — the standalone counterpart to the chat TUI's `/sandbox`
@@ -2707,7 +2709,7 @@ async function runPty({ session, agentId, agentName }) {
 		return 1;
 	}
 	console.error(`Connecting to ${agentName}'s sandbox… (Ctrl-] detaches)`);
-	const { runRawPtyPassthrough } = await import("./raw-pty-skuWh-QO.mjs");
+	const { runRawPtyPassthrough } = await import("./raw-pty-3EkG-jjH.mjs");
 	const result = await runRawPtyPassthrough({
 		stdin: process.stdin,
 		stdout: process.stdout,
@@ -2719,6 +2721,275 @@ async function runPty({ session, agentId, agentName }) {
 	return result.code;
 }
 
+//#endregion
+//#region src/commands/fs.ts
+/**
+* POSIX-quote one word so the remote shell treats it as a single token. Wraps
+* `shell-quote`'s `quote` (already a repo dependency, used elsewhere in the
+* CLI) rather than hand-rolling the escaping — it is the well-tested source of
+* truth for making a path/arg with spaces, quotes, `$`, `;`, globs, etc. inert
+* when interpolated into an `sh -c` line.
+*/
+function shellQuote(word) {
+	return quote([word]);
+}
+const MISSING_FILE_EXIT = 44;
+/**
+* Build the remote shell command that base64-encodes a file to stdout. Exits
+* {@link MISSING_FILE_EXIT} when the path doesn't exist, 1 when it's a
+* directory, so the caller can tell "create new" from a genuine error.
+*/
+function buildReadCommand(path) {
+	const q = shellQuote(path);
+	return `sh -c ${shellQuote(`if [ ! -e ${q} ]; then exit ${MISSING_FILE_EXIT}; fi; if [ -d ${q} ]; then echo 'path is a directory' >&2; exit 1; fi; base64 < ${q}`)}`;
+}
+/**
+* Build the remote shell command that decodes `b64` and writes it to `path`
+* atomically (temp file + `mv`) so a dropped connection can't truncate the
+* original in place. `token` is a caller-supplied unique suffix for the temp
+* file — generated in JS (not the shell's `$$`, which shell-quote would escape
+* to a literal, so every write would collide on the same temp name).
+*/
+function buildWriteCommand(path, b64, token) {
+	const tmp = `${path}.skydive-edit.${token}`;
+	return `sh -c ${shellQuote(`printf %s ${shellQuote(b64)} | base64 -d > ${shellQuote(tmp)} && mv -f ${shellQuote(tmp)} ${shellQuote(path)}`)}`;
+}
+/**
+* Resolve the editor command from an explicit override, then $VISUAL, $EDITOR,
+* then `vi`. Split so `EDITOR="code --wait"` (command + flags) is honored.
+*/
+function resolveEditor(override, env) {
+	const parts = (override || env.VISUAL || env.EDITOR || "vi").split(/\s+/).filter(Boolean);
+	return {
+		bin: parts[0] ?? "vi",
+		args: parts.slice(1)
+	};
+}
+/**
+* `skydive fs edit <path>` — edit a file that lives on the agent's computer
+* (its sandbox) with your LOCAL editor. It reads the remote file down over the
+* same relay `skydive sandbox` uses, opens it in `$EDITOR`, and writes your
+* changes back when you save and close — so you edit a remote file as if it
+* were local, without opening the chat TUI.
+*
+* There is no server-side "file" endpoint yet: this rides entirely on the
+* existing one-shot `exec` mode of the sandbox stream. Contents move
+* base64-encoded in BOTH directions (exec has no stdin, so the write payload is
+* embedded in the command string) which keeps binary bytes, trailing newlines,
+* and CRLF intact. Access gating (EDIT on the agent + the sandbox kill switch)
+* is enforced by the relay, exactly as for `skydive sandbox`. A future PR adds
+* a first-class `fs` channel that `edit` (and `fs mount`) will ride instead.
+*/
+const fsEditCommand = {
+	command: "edit <path>",
+	describe: "Edit a file on the agent's computer (its sandbox) with your local $EDITOR",
+	builder: (y) => y.positional("path", {
+		type: "string",
+		demandOption: true,
+		describe: "Absolute or sandbox-relative path of the file to edit"
+	}).option("agent", {
+		type: "string",
+		describe: "Target agent, by id, slug, or name. Optional when the account has exactly one agent."
+	}).option("editor", {
+		type: "string",
+		describe: "Editor command to open (defaults to $VISUAL, then $EDITOR, then vi)"
+	}).example("skydive fs edit --agent grace /tmp/notes.md", "Edit a remote file").example("EDITOR=nano skydive fs edit ~/.self/soul.md", "Pick the editor via $EDITOR"),
+	handler: async (argv) => {
+		const session = requireSession(argv);
+		const remotePath = argv.path;
+		const { createRestClient } = await import("./rest-DADJh0bi.mjs");
+		const { resolveAgent } = await import("./print-ba_0hiV9.mjs");
+		const client = createRestClient({
+			appUrl: session.appUrl,
+			sessionToken: session.sessionToken
+		});
+		let agent;
+		try {
+			agent = resolveAgent(await client.listAgents({
+				scope: "org",
+				onPage: null
+			}), argv.agent ?? null);
+		} catch (error) {
+			printError(error instanceof Error ? error.message : String(error));
+			process.exit(1);
+		}
+		const opts = {
+			session,
+			agentId: agent.id
+		};
+		console.error(`Reading ${remotePath} from ${agent.name}'s sandbox…`);
+		const read = await readRemote({
+			...opts,
+			path: remotePath
+		});
+		if (read.kind === "error") {
+			printError(read.message);
+			process.exit(1);
+		}
+		const original = read.content;
+		if (read.kind === "missing") console.error(`${remotePath} does not exist yet — it will be created when you save.`);
+		const dir = await mkdtemp(join(tmpdir(), "skydive-edit-"));
+		const local = join(dir, remotePath.split("/").pop() || "file");
+		try {
+			await writeFile(local, original);
+			if (!await openEditor(argv.editor, local)) {
+				printError("Editor exited non-zero; not saving any changes.");
+				process.exit(1);
+			}
+			const edited = await readFile(local);
+			if (edited.equals(original)) {
+				console.error("No changes — nothing written.");
+				process.exit(0);
+			}
+			console.error(`Writing changes back to ${remotePath}…`);
+			const wrote = await writeRemote({
+				...opts,
+				path: remotePath,
+				content: edited
+			});
+			if (wrote.kind === "error") {
+				printError(`${wrote.message}\nYour edited copy is kept at ${local} so you don't lose it.`);
+				process.exit(1);
+			}
+			console.error("Saved.");
+			process.exit(0);
+		} finally {
+			await rm(dir, {
+				recursive: true,
+				force: true
+			}).catch((error) => {
+				console.error(`Note: could not remove temp dir ${dir}: ${error instanceof Error ? error.message : String(error)}`);
+			});
+		}
+	}
+};
+/**
+* Read a remote file as bytes. Runs `base64` on the file in the sandbox and
+* decodes the streamed stdout locally. Distinguishes "file is missing" (exit
+* code 44, so `edit` can create it) from a real read failure.
+*/
+function readRemote({ session, agentId, path }) {
+	const command = buildReadCommand(path);
+	const chunks = [];
+	const stderr = [];
+	return new Promise((resolve) => {
+		SandboxStream.open({
+			mode: "exec",
+			appUrl: session.appUrl,
+			sessionToken: session.sessionToken,
+			agentId,
+			command,
+			onEvent: (e) => {
+				switch (e.type) {
+					case "data":
+						chunks.push(Buffer.from(e.bytes));
+						break;
+					case "exit":
+						if (e.code === MISSING_FILE_EXIT) resolve({
+							kind: "missing",
+							content: Buffer.alloc(0)
+						});
+						else if (e.code === 0) resolve({
+							kind: "ok",
+							content: Buffer.from(Buffer.concat(chunks).toString("utf8").replace(/\s+/g, ""), "base64")
+						});
+						else resolve({
+							kind: "error",
+							message: stderr.join("").trim() || `Could not read the file (exit ${e.code}).`
+						});
+						break;
+					case "error":
+						stderr.push(e.message);
+						break;
+					case "close":
+						resolve({
+							kind: "error",
+							message: e.failure || "The connection to the sandbox closed before the file could be read."
+						});
+						break;
+				}
+			}
+		});
+	});
+}
+/**
+* Write bytes to a remote file. Exec has no stdin, so the base64 payload is
+* embedded in the command and decoded on the far side. Writes atomically via a
+* temp file + `mv` so a dropped connection mid-write can't leave a truncated
+* file in place of the original.
+*/
+function writeRemote({ session, agentId, path, content }) {
+	const token = randomBytes(6).toString("hex");
+	const command = buildWriteCommand(path, content.toString("base64"), token);
+	const stderr = [];
+	return new Promise((resolve) => {
+		SandboxStream.open({
+			mode: "exec",
+			appUrl: session.appUrl,
+			sessionToken: session.sessionToken,
+			agentId,
+			command,
+			onEvent: (e) => {
+				switch (e.type) {
+					case "data":
+						stderr.push(Buffer.from(e.bytes).toString("utf8"));
+						break;
+					case "exit":
+						resolve(e.code === 0 ? { kind: "ok" } : {
+							kind: "error",
+							message: stderr.join("").trim() || `Could not write the file (exit ${e.code}).`
+						});
+						break;
+					case "error":
+						stderr.push(e.message);
+						break;
+					case "close":
+						resolve({
+							kind: "error",
+							message: e.failure || "The connection to the sandbox closed before the file was written."
+						});
+						break;
+				}
+			}
+		});
+	});
+}
+/**
+* Open `file` in the caller's editor and resolve to whether it exited cleanly.
+* Precedence: explicit `--editor`, then $VISUAL, $EDITOR, then `vi`. The editor
+* inherits the real TTY so full-screen editors (vim/nano) work.
+*/
+function openEditor(override, file) {
+	const { bin, args: editorArgs } = resolveEditor(override, process.env);
+	const args = [...editorArgs, file];
+	return new Promise((resolve) => {
+		const child = spawn(bin, args, { stdio: "inherit" });
+		child.on("error", (err) => {
+			printError(`Could not launch editor "${bin}": ${err.message}`);
+			resolve(false);
+		});
+		child.on("exit", (code) => resolve(code === 0));
+	});
+}
+/**
+* `skydive fs` — work with the files on an agent's computer (its sandbox) from
+* your own machine. The namespace for filesystem access:
+*
+*   - `fs edit <path>`  edit one remote file with your local editor (shipped).
+*   - `fs mount <dir>`  mount the whole sandbox filesystem locally (coming in a
+*                       later PR, on a first-class `fs` relay channel).
+*
+* Grouping these under one command keeps the file surface discoverable and
+* leaves room to grow (`fs ls`, `fs cat`, `fs pull`) without adding more
+* top-level commands.
+*/
+const fsCommand = {
+	command: "fs <command>",
+	describe: "Work with the files on an agent's computer (its sandbox)",
+	builder: (y) => y.command(fsEditCommand).demandCommand(1, "Specify a subcommand: edit"),
+	handler: () => {}
+};
+
 //#endregion
 //#region src/update-check/manifest.ts
 /**
@@ -3527,7 +3798,7 @@ const configCommand = {
 //#endregion
 //#region src/cli.ts
 function createCli(argv) {
-	return yargs(argv).scriptName("skydive").usage("$0 <command> [options]").parserConfiguration({ "populate--": true }).example("skydive auth login", "Store your API key").example("skydive chat", "Open the interactive chat TUI (prod)").example("skydive chat --api-url http://localhost:4500", "Chat against a local dev API").example("skydive agents list", "List your agents").example("skydive completion install", "Set up TAB completion for your shell").example("skydive keys create \"my-key\"", "Create an API key").example("skydive secrets set OPENAI_API_KEY --agent-id <id>", "Set a secret (value from stdin)").example("skydive workspace list", "List workspaces on your account").example("skydive config set updateCheck false", "Disable the daily update check").example("skydive workspace switch acme-team", "Switch the workspace all `skydive` commands act on").example("skydive portal open --agent grace", "Open the portal to this machine for an agent, headless (no TUI)").option("json", {
+	return yargs(argv).scriptName("skydive").usage("$0 <command> [options]").parserConfiguration({ "populate--": true }).example("skydive auth login", "Store your API key").example("skydive chat", "Open the interactive chat TUI (prod)").example("skydive chat --api-url http://localhost:4500", "Chat against a local dev API").example("skydive agents list", "List your agents").example("skydive completion install", "Set up TAB completion for your shell").example("skydive keys create \"my-key\"", "Create an API key").example("skydive secrets set OPENAI_API_KEY --agent-id <id>", "Set a secret (value from stdin)").example("skydive workspace list", "List workspaces on your account").example("skydive config set updateCheck false", "Disable the daily update check").example("skydive workspace switch acme-team", "Switch the workspace all `skydive` commands act on").example("skydive portal open --agent grace", "Open the portal to this machine for an agent, headless (no TUI)").example("skydive fs edit --agent grace /tmp/notes.md", "Edit a file on the agent's computer with your local editor").option("json", {
 		type: "boolean",
 		default: false,
 		global: true,
@@ -3541,7 +3812,7 @@ function createCli(argv) {
 		type: "string",
 		global: true,
 		describe: "Override API base URL"
-	}).command(authCommand).command(chatCommand).command(messagesCommand).command(conversationsCommand).command(agentsCommand).command(importCommand).command(keysCommand).command(secretsCommand).command(workspaceCommand).command(portalCommand).command(sandboxCommand).command(updateCommand).command(configCommand).command(completionCommand).demandCommand(1, "Specify a command. Run --help for usage.").strict().wrap(null).version(version).alias("v", "version").alias("h", "help").help().fail((msg, err) => {
+	}).command(authCommand).command(chatCommand).command(messagesCommand).command(conversationsCommand).command(agentsCommand).command(importCommand).command(keysCommand).command(secretsCommand).command(workspaceCommand).command(portalCommand).command(sandboxCommand).command(fsCommand).command(updateCommand).command(configCommand).command(completionCommand).demandCommand(1, "Specify a command. Run --help for usage.").strict().wrap(null).version(version).alias("v", "version").alias("h", "help").help().fail((msg, err) => {
 		printError(err ? err instanceof Error ? err.message : String(err) : msg ?? "Unknown error");
 		process.exit(1);
 	});
@@ -3754,7 +4025,7 @@ function setupUpdateCheck(argv) {
 
 //#endregion
 //#region src/changelog.generated.ts
-const CHANGELOG_MD = "# Changelog\n\nAll notable changes to the Skydive CLI are documented here.\n\nThe format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),\nand this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n\n## [Unreleased]\n\n## [0.4.0] - 2026-08-07\n\n### Added\n\n- `skydive chat` works with API key auth: an API key alone now opens the chat TUI (and headless `chat -p`) without a browser login, using the key's pinned workspace.\n- `skydive config` command to view and set the safe, hand-editable CLI preferences (`shareMachineDefault`, `updateCheck`) without opening `config.json`. `config`/`config list` shows each key, its effective value, and whether it comes from the file or the built-in default; `config get`/`set`/`unset` read and change one key; `config path` prints the config file location. It only ever touches those preference keys, never credentials or flow-managed state.\n- Billing-blocked sends and runs now surface the server-authored recovery\n  guidance from the typed billing outcome. The chat TUI renders it as a\n  warning-toned system-notice row — live when a send is refused or a run is\n  stopped at the billing boundary, and again when reopening a conversation\n  that holds a persisted billing notice — instead of a generic error.\n  Headless `chat -p` and `messages get` print the guidance (state, recovery\n  step, and manage-billing URL) on stderr, keep any partial output already\n  streamed on stdout, and exit with code `5` (distinct from the generic `1`)\n  so scripted callers can tell a billing pause from a failure.\n- Syntax highlighting for 14 more languages in the chat transcript and file/review panes (python, bash, go, rust, c, cpp, java, ruby, css, html, json, yaml, and more) — previously only JavaScript/TypeScript rendered colored.\n\n### Changed\n\n- `skydive agent list` lists the full agent roster by default instead of a truncated page.\n\n### Fixed\n\n- Long multi-line bash tool-call commands (e.g. heredocs) are clamped with a `+N more · click to expand` tail instead of dumping their whole body into the scrollback.\n- Tool error output is clipped the same way as ok output, so a failing command no longer floods the transcript.\n- The TUI toast overlay has an opaque background instead of letting the transcript bleed through.\n\n## [0.3.0] - 2026-08-04\n\n### Added\n\n**Chat TUI**\n\n- `/fork` slash command to fork a conversation at any point and continue in a new thread.\n- `/conversation` switches threads from inside a live session.\n- `/compact` triggers manual conversation compaction.\n- `/portal` and `/copy` slash commands.\n- Archive the current conversation from the chat TUI.\n- `--new` flag on `skydive chat` to start a fresh conversation.\n- Debounced server-side conversation search in the picker, with title matches ranked first.\n- File review pane orientation toggle, and review comments in the file pane.\n- Pinned plan card controls and a jump-to-latest hint.\n- Terminal title (OSC) follows the live conversation title on every screen; inside cmux the workspace is renamed too, and linked PRs are pushed to the cmux sidebar.\n- Every participating agent shows in the conversation list; connect cards each have their own identity, and ctrl+r asks which connect card to act on.\n- Colored Skydive splash art in `skydive --help` and the TUI pickers.\n- New-agent name prefilled from the server's suggestion.\n\n**CLI & platform**\n\n- `skydive update` self-updater, with an update notice when a new version is available.\n- Shell completions for bash, zsh, and fish via `completion install`.\n- Portal daemon: one connection per host with per-conversation working directories.\n- Agent-led coding-agent import (`skydive import`).\n- Per-workspace scoping on the REST client, and cross-org `--agent <uuid>` auto-switches workspace.\n- `skydive-beta` wrapper for the canary channel.\n\n### Fixed\n\n- `skydive update` no longer claims an update is available on every npm install.\n- Chat memory is bounded (payload clamps + windowed rows) with a memory watchdog and OOM diagnostic report; transcript rows are memoized so streaming stops re-rendering the whole chat.\n- Chat-send failures map to real error messages.\n- Notification and sidebar previews use the last text block of the reply and strip inline markdown.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n- Sending to non-web channel conversations is blocked in the TUI.\n- GitHub bot connect opens on the web front door, not api.skydive.com.\n- TUI activity counter times from the run, not the screen.\n\n## [0.2.0] - 2026-07-29\n\n### Added\n\n**Sandbox & machine access**\n\n- Standalone `skydive sandbox` command for direct access to an agent's sandbox.\n- `/sandbox` in the chat TUI — live PTY session and one-shot command execution.\n- Headless machine sharing via `skydive portal`, with self-registering portal grants.\n- `shareMachineDefault` config key for always-on portal sharing.\n\n**Chat TUI**\n\n- File pane (`ctrl+g`) with Changes and Files tabs: a shared file tree plus source viewer and a workspace browser, mouse-resizable and responsive to terminal size.\n- Agent todo list rendered in the chat TUI, above the composer, mirroring the web chat's todo card.\n- Fuzzy finder in the conversation and agent pickers.\n- Slash-command autocomplete menu.\n- Paste or drag-and-drop any file into the composer; paste clipboard images with Cmd+V.\n- Run local shell commands with `!` in the composer.\n- Conversation recaps, streamed live title updates, and per-agent attribution on assistant turns.\n- Working timer rolls up into minutes and hours.\n- Conversation picker paginates past 50 conversations and shows only your own conversations.\n- Esc leaves a live run; typing `exit` quits the chat.\n- Cursor Dark theme.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n\n**Headless & scripting**\n\n- Resume a conversation by id.\n- `conversations list` and `conversations show` for transcript reads.\n- `messages get`, with run recovery keyed on message id.\n- Connect cards surface in headless `-p` mode so a driving agent never gets stuck.\n\n**Authentication**\n\n- `skydive auth login` via the browser now auto-mints an API key, so one login yields both a chat session and a usable management credential. Management commands announce the key's pinned workspace when it drives them, so a workspace mismatch is visible at use time.\n- Workspace picker on the device authorization page.\n- Account and workspace identity shown in `auth status`.\n\n**Platform**\n\n- Standalone binary builds compiling the CLI into a per-target executable.\n- Interactive workspace switcher; management commands follow the active workspace.\n- Terminal host integrations and agent notifications.\n\n### Fixed\n\n- Transcript errors collapse to one line, click to expand (REST and portal errors keep their full body).\n- Dragged/pasted image file paths attach the file instead of inserting path text, including macOS paths with literal parentheses.\n- Bare URLs in chat markdown are hyperlinked so they survive text wrap.\n- Composer draft is preserved across TUI overlays.\n- Relative connect links resolve before opening the browser.\n- Numbered markdown headings render colored in the TUI.\n- Chat transcript pages by 75% of a screen; picker rows stay on one line.\n- Run starts push to the TUI over the conversation stream.\n- Security: remediated high-severity dependency findings and cleared tar/shell-quote CVEs.\n\n## [0.1.0] - 2026-07-21\n\nInitial public release: `skydive chat` TUI, agent and conversation management,\ndevice authorization, and headless `-p` mode.\n";
+const CHANGELOG_MD = "# Changelog\n\nAll notable changes to the Skydive CLI are documented here.\n\nThe format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),\nand this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n\n## [Unreleased]\n\n### Added\n\n- `skydive fs` — a namespace for working with the files on an agent's computer (its sandbox) from your own machine. Its first subcommand, `skydive fs edit <path>`, reads a remote file down over the same relay `skydive sandbox` uses, opens it in your local editor (`$VISUAL`/`$EDITOR`, override with `--editor`, defaults to `vi`), and writes your changes back atomically when you save and close — so you can edit a remote file as if it were local without opening the chat TUI. A path that doesn't exist yet is created on save; no changes means nothing is written. Access is gated on EDIT permission for the agent, exactly like `skydive sandbox`. (A first-class `fs` relay channel and `skydive fs mount` land in follow-ups.)\n\n## [0.4.0] - 2026-08-07\n\n### Added\n\n- `skydive chat` works with API key auth: an API key alone now opens the chat TUI (and headless `chat -p`) without a browser login, using the key's pinned workspace.\n- `skydive config` command to view and set the safe, hand-editable CLI preferences (`shareMachineDefault`, `updateCheck`) without opening `config.json`. `config`/`config list` shows each key, its effective value, and whether it comes from the file or the built-in default; `config get`/`set`/`unset` read and change one key; `config path` prints the config file location. It only ever touches those preference keys, never credentials or flow-managed state.\n- Billing-blocked sends and runs now surface the server-authored recovery\n  guidance from the typed billing outcome. The chat TUI renders it as a\n  warning-toned system-notice row — live when a send is refused or a run is\n  stopped at the billing boundary, and again when reopening a conversation\n  that holds a persisted billing notice — instead of a generic error.\n  Headless `chat -p` and `messages get` print the guidance (state, recovery\n  step, and manage-billing URL) on stderr, keep any partial output already\n  streamed on stdout, and exit with code `5` (distinct from the generic `1`)\n  so scripted callers can tell a billing pause from a failure.\n- Syntax highlighting for 14 more languages in the chat transcript and file/review panes (python, bash, go, rust, c, cpp, java, ruby, css, html, json, yaml, and more) — previously only JavaScript/TypeScript rendered colored.\n\n### Changed\n\n- `skydive agent list` lists the full agent roster by default instead of a truncated page.\n\n### Fixed\n\n- Long multi-line bash tool-call commands (e.g. heredocs) are clamped with a `+N more · click to expand` tail instead of dumping their whole body into the scrollback.\n- Tool error output is clipped the same way as ok output, so a failing command no longer floods the transcript.\n- The TUI toast overlay has an opaque background instead of letting the transcript bleed through.\n\n## [0.3.0] - 2026-08-04\n\n### Added\n\n**Chat TUI**\n\n- `/fork` slash command to fork a conversation at any point and continue in a new thread.\n- `/conversation` switches threads from inside a live session.\n- `/compact` triggers manual conversation compaction.\n- `/portal` and `/copy` slash commands.\n- Archive the current conversation from the chat TUI.\n- `--new` flag on `skydive chat` to start a fresh conversation.\n- Debounced server-side conversation search in the picker, with title matches ranked first.\n- File review pane orientation toggle, and review comments in the file pane.\n- Pinned plan card controls and a jump-to-latest hint.\n- Terminal title (OSC) follows the live conversation title on every screen; inside cmux the workspace is renamed too, and linked PRs are pushed to the cmux sidebar.\n- Every participating agent shows in the conversation list; connect cards each have their own identity, and ctrl+r asks which connect card to act on.\n- Colored Skydive splash art in `skydive --help` and the TUI pickers.\n- New-agent name prefilled from the server's suggestion.\n\n**CLI & platform**\n\n- `skydive update` self-updater, with an update notice when a new version is available.\n- Shell completions for bash, zsh, and fish via `completion install`.\n- Portal daemon: one connection per host with per-conversation working directories.\n- Agent-led coding-agent import (`skydive import`).\n- Per-workspace scoping on the REST client, and cross-org `--agent <uuid>` auto-switches workspace.\n- `skydive-beta` wrapper for the canary channel.\n\n### Fixed\n\n- `skydive update` no longer claims an update is available on every npm install.\n- Chat memory is bounded (payload clamps + windowed rows) with a memory watchdog and OOM diagnostic report; transcript rows are memoized so streaming stops re-rendering the whole chat.\n- Chat-send failures map to real error messages.\n- Notification and sidebar previews use the last text block of the reply and strip inline markdown.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n- Sending to non-web channel conversations is blocked in the TUI.\n- GitHub bot connect opens on the web front door, not api.skydive.com.\n- TUI activity counter times from the run, not the screen.\n\n## [0.2.0] - 2026-07-29\n\n### Added\n\n**Sandbox & machine access**\n\n- Standalone `skydive sandbox` command for direct access to an agent's sandbox.\n- `/sandbox` in the chat TUI — live PTY session and one-shot command execution.\n- Headless machine sharing via `skydive portal`, with self-registering portal grants.\n- `shareMachineDefault` config key for always-on portal sharing.\n\n**Chat TUI**\n\n- File pane (`ctrl+g`) with Changes and Files tabs: a shared file tree plus source viewer and a workspace browser, mouse-resizable and responsive to terminal size.\n- Agent todo list rendered in the chat TUI, above the composer, mirroring the web chat's todo card.\n- Fuzzy finder in the conversation and agent pickers.\n- Slash-command autocomplete menu.\n- Paste or drag-and-drop any file into the composer; paste clipboard images with Cmd+V.\n- Run local shell commands with `!` in the composer.\n- Conversation recaps, streamed live title updates, and per-agent attribution on assistant turns.\n- Working timer rolls up into minutes and hours.\n- Conversation picker paginates past 50 conversations and shows only your own conversations.\n- Esc leaves a live run; typing `exit` quits the chat.\n- Cursor Dark theme.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n\n**Headless & scripting**\n\n- Resume a conversation by id.\n- `conversations list` and `conversations show` for transcript reads.\n- `messages get`, with run recovery keyed on message id.\n- Connect cards surface in headless `-p` mode so a driving agent never gets stuck.\n\n**Authentication**\n\n- `skydive auth login` via the browser now auto-mints an API key, so one login yields both a chat session and a usable management credential. Management commands announce the key's pinned workspace when it drives them, so a workspace mismatch is visible at use time.\n- Workspace picker on the device authorization page.\n- Account and workspace identity shown in `auth status`.\n\n**Platform**\n\n- Standalone binary builds compiling the CLI into a per-target executable.\n- Interactive workspace switcher; management commands follow the active workspace.\n- Terminal host integrations and agent notifications.\n\n### Fixed\n\n- Transcript errors collapse to one line, click to expand (REST and portal errors keep their full body).\n- Dragged/pasted image file paths attach the file instead of inserting path text, including macOS paths with literal parentheses.\n- Bare URLs in chat markdown are hyperlinked so they survive text wrap.\n- Composer draft is preserved across TUI overlays.\n- Relative connect links resolve before opening the browser.\n- Numbered markdown headings render colored in the TUI.\n- Chat transcript pages by 75% of a screen; picker rows stay on one line.\n- Run starts push to the TUI over the conversation stream.\n- Security: remediated high-severity dependency findings and cleared tar/shell-quote CVEs.\n\n## [0.1.0] - 2026-07-21\n\nInitial public release: `skydive chat` TUI, agent and conversation management,\ndevice authorization, and headless `-p` mode.\n";
 
 //#endregion
 //#region src/whats-new.ts
@@ -3897,7 +4168,7 @@ if (process.argv.includes(UPDATE_WORKER_FLAG)) {
 	process.exit(0);
 }
 if (process.argv.includes(PORTAL_DAEMON_FLAG)) {
-	const { runPortalDaemon } = await import("./daemon-wUaIOwEj.mjs");
+	const { runPortalDaemon } = await import("./daemon-imLBqTGg.mjs");
 	runPortalDaemon(process.argv);
 } else runCli();
 function runCli() {

package/dist/js/{boot-Cw_SOMZH.mjs → boot-D4tjj6LN.mjs}

@@ -1,13 +1,14 @@
 #!/usr/bin/env node
-import { D as setActiveWorkspace, E as listWorkspaces, S as themesForMode, _ as themeForMode, a as installCrashHandler, b as themeVersion, c as MARK_CELLS, d as DEFAULT_THEME_ID, f as applyTheme, g as theme, h as noColorRequested, i as writeArtifact, l as WORDMARK, m as monoTheme, n as profilingEnabled, o as buildCrashReport, p as findTheme, r as record, s as writeCrashReport, v as themeMode, w as getActiveWorkspaceId, y as themeModeFromColorFgBg } from "./profiler-Dh7VeDnQ.mjs";
+import { D as setActiveWorkspace, E as listWorkspaces, S as themesForMode, _ as themeForMode, a as installCrashHandler, b as themeVersion, c as MARK_CELLS, d as DEFAULT_THEME_ID, f as applyTheme, g as theme, h as noColorRequested, i as writeArtifact, l as WORDMARK, m as monoTheme, n as profilingEnabled, o as buildCrashReport, p as findTheme, r as record, s as writeCrashReport, v as themeMode, w as getActiveWorkspaceId, y as themeModeFromColorFgBg } from "./profiler-CZtc7-p8.mjs";
 import { B as saveTheme, D as getSavedTheme, E as getReviewStateDir, L as resolveWebUrl, S as getConfigPath, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, i as resolveAgent, l as parseExternalOauthConnectParams, m as specKeyFor, p as parseConnectCard, s as MASK_CHAR, u as parseOauthConnectParams, v as DEFAULT_API_URL, y as DEFAULT_APP_URL } from "./print-CbayCa87.mjs";
 import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
 import { a as isRecord, i as errorMessage, n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-BY2nADw5.mjs";
 import { i as billingBlockedOutcomeFromSendResponse } from "./billing-blocked-2wju4gC_.mjs";
 import { t as PortalClient } from "./client-Cf7cvftg.mjs";
-import { d as makeLineParser, f as parseDaemonMessage, l as daemonPaths, n as ensureDaemonRunning, s as LOCAL_PROTOCOL_VERSION, u as encodeLine } from "./daemon-DOWC0OOB.mjs";
+import "./daemon-DaUaCMwC.mjs";
 import { t as SandboxStream } from "./client-Cn2af31H.mjs";
-import { t as runRawPtyPassthrough } from "./raw-pty-C7PxMDc1.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-CJxbCLOb.mjs";
+import { t as runRawPtyPassthrough } from "./raw-pty-B6mAroiI.mjs";
 import * as os$1 from "node:os";
 import { homedir, platform, release, tmpdir } from "node:os";
 import path, { basename, extname, isAbsolute, join, win32 } from "node:path";
@@ -15,7 +16,7 @@ import { z } from "zod";
 import open from "open";
 import { constants } from "node:fs";
 import { execFile, spawn } from "node:child_process";
-import { createHash, randomUUID } from "node:crypto";
+import { createHash } from "node:crypto";
 import { connect, createConnection } from "node:net";
 import { access, appendFile, mkdir, mkdtemp, readFile, readdir, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import { MarkdownRenderable, RenderableEvents, StyledText, SyntaxStyle, addDefaultParsers, createCliRenderer, decodePasteBytes, detectLinks, fg, link } from "@opentui/core";
@@ -293,151 +294,6 @@ async function resolveInitialScreen({ rest, agentSelector, conversationId, newCo
 	};
 }
 
-//#endregion
-//#region ../portal-daemon/src/daemon-client.ts
-var PortalDaemonClient = class {
-	sessionId = randomUUID();
-	socket = null;
-	disposed = false;
-	reconnectTimer = null;
-	lastBind = null;
-	wantEnabled = false;
-	pendingGrants = /* @__PURE__ */ new Set();
-	grantedAgentIds = /* @__PURE__ */ new Set();
-	constructor(opts) {
-		this.opts = opts;
-	}
-	/** Spawn the daemon if needed and attach. Idempotent. */
-	async start() {
-		if (this.disposed) return;
-		await ensureDaemonRunning(this.opts.appUrl);
-		this.connect();
-	}
-	connect() {
-		if (this.disposed) return;
-		const { socketPath } = daemonPaths(this.opts.appUrl);
-		const socket = connect(socketPath);
-		socket.setEncoding("utf8");
-		this.socket = socket;
-		const parse = makeLineParser();
-		socket.on("connect", () => {
-			this.send({
-				t: "hello",
-				v: LOCAL_PROTOCOL_VERSION,
-				sessionId: this.sessionId,
-				token: this.opts.sessionToken
-			});
-			if (this.wantEnabled) this.send({ t: "enable" });
-			if (this.lastBind) this.send({
-				t: "bind",
-				sessionId: this.sessionId,
-				conversationId: this.lastBind.conversationId,
-				cwd: this.lastBind.cwd
-			});
-			for (const agentId of this.pendingGrants) this.send({
-				t: "grant",
-				agentId
-			});
-		});
-		socket.on("data", (chunk) => {
-			for (const line of parse(chunk)) {
-				const msg = parseDaemonMessage(line);
-				if (msg) this.onMessage(msg);
-			}
-		});
-		const onClose = () => {
-			if (this.socket === socket) this.socket = null;
-			this.scheduleReconnect();
-		};
-		socket.on("close", onClose);
-		socket.on("error", onClose);
-	}
-	scheduleReconnect() {
-		if (this.disposed || this.reconnectTimer) return;
-		this.reconnectTimer = setTimeout(() => {
-			this.reconnectTimer = null;
-			this.start();
-		}, 500);
-		this.reconnectTimer.unref();
-	}
-	onMessage(msg) {
-		if (msg.t === "state") {
-			this.grantedAgentIds = new Set(msg.grantedAgentIds);
-			this.opts.onState({
-				status: msg.status,
-				machineName: msg.machineName,
-				friendlyName: msg.friendlyName,
-				error: msg.error,
-				grantedAgentIds: msg.grantedAgentIds
-			});
-		}
-	}
-	/** Whether this agent is currently authorized on the machine (last daemon state). */
-	isGranted(agentId) {
-		return this.grantedAgentIds.has(agentId);
-	}
-	/** Whether the user has turned machine sharing on from this CLI. */
-	isEnabled() {
-		return this.wantEnabled;
-	}
-	send(msg) {
-		if (this.socket?.writable) this.socket.write(encodeLine(msg));
-	}
-	/** Turn machine sharing on (the daemon connects the portal). */
-	enable() {
-		this.wantEnabled = true;
-		this.send({ t: "enable" });
-	}
-	/** Turn machine sharing off. */
-	disable() {
-		this.wantEnabled = false;
-		this.send({ t: "disable" });
-	}
-	/** Register / update this conversation's working directory for exec routing. */
-	bind(conversationId, cwd) {
-		this.lastBind = {
-			conversationId,
-			cwd
-		};
-		this.send({
-			t: "bind",
-			sessionId: this.sessionId,
-			conversationId,
-			cwd
-		});
-	}
-	/**
-	* Authorize one agent to run commands on this machine. Resolves once the
-	* request is sent to the daemon (the daemon performs the grant and pushes the
-	* updated state); kept async so it's a drop-in for the old in-process client's
-	* awaited `grantAgent`.
-	*/
-	grantAgent(agentId) {
-		this.pendingGrants.add(agentId);
-		this.send({
-			t: "grant",
-			agentId
-		});
-		return Promise.resolve();
-	}
-	/** Detach this CLI. The daemon keeps running for other clients. */
-	dispose() {
-		this.disposed = true;
-		if (this.reconnectTimer) {
-			clearTimeout(this.reconnectTimer);
-			this.reconnectTimer = null;
-		}
-		this.send({
-			t: "bye",
-			sessionId: this.sessionId
-		});
-		try {
-			this.socket?.destroy();
-		} catch (_error) {}
-		this.socket = null;
-	}
-};
-
 //#endregion
 //#region ../portal-daemon/src/create-portal-client.ts
 /**

package/dist/js/{daemon-DOWC0OOB.mjs → daemon-DaUaCMwC.mjs}

@@ -95,6 +95,15 @@ const clientBindSchema = z.object({
 /** `enable`/`disable` — turn machine sharing on/off (user-initiated). */
 const clientEnableSchema = z.object({ t: z.literal("enable") });
 const clientDisableSchema = z.object({ t: z.literal("disable") });
+/**
+* `cwd` — set the directory an exec runs in when its conversation is unknown.
+* `skydive portal open` has no conversation of its own: it shares the machine
+* for one directory, so it sets the fallback directly instead of binding.
+*/
+const clientCwdSchema = z.object({
+	t: z.literal("cwd"),
+	cwd: z.string().min(1)
+});
 /** `grant` — authorize one agent to reach this machine (user-initiated). */
 const clientGrantSchema = z.object({
 	t: z.literal("grant"),
@@ -122,6 +131,7 @@ const clientMessageSchema = z.discriminatedUnion("t", [
 	clientBindSchema,
 	clientEnableSchema,
 	clientDisableSchema,
+	clientCwdSchema,
 	clientGrantSchema,
 	clientByeSchema,
 	clientStatusSchema,
@@ -289,7 +299,8 @@ var PortalDaemon = class {
 		const conn = {
 			socket,
 			sessionId: null,
-			conversations: /* @__PURE__ */ new Set()
+			conversations: /* @__PURE__ */ new Set(),
+			wantsShare: false
 		};
 		this.conns.add(conn);
 		this.clearIdleTimer();
@@ -323,12 +334,17 @@ var PortalDaemon = class {
 				this.persistState();
 				return;
 			case "enable":
+				conn.wantsShare = true;
 				this.ensureClient();
 				this.client?.enable();
 				return;
 			case "disable":
+				for (const other of this.conns) other.wantsShare = false;
 				this.client?.disable();
 				return;
+			case "cwd":
+				this.fallbackCwd = msg.cwd;
+				return;
 			case "grant":
 				this.ensureClient();
 				this.client?.grantAgent(msg.agentId).catch((error) => {
@@ -353,6 +369,8 @@ var PortalDaemon = class {
 		try {
 			conn.socket.destroy();
 		} catch (_error) {}
+		conn.wantsShare = false;
+		if (![...this.conns].some((c) => c.wantsShare)) this.client?.disable();
 		if (this.conns.size === 0) this.armIdleTimer();
 	}
 	/** Create the single PortalClient the first time a client needs the portal. */

package/dist/js/daemon-client-CJxbCLOb.mjs

@@ -0,0 +1,168 @@
+#!/usr/bin/env node
+import { d as makeLineParser, f as parseDaemonMessage, l as daemonPaths, n as ensureDaemonRunning, s as LOCAL_PROTOCOL_VERSION, u as encodeLine } from "./daemon-DaUaCMwC.mjs";
+import { randomUUID } from "node:crypto";
+import { connect } from "node:net";
+
+//#region ../portal-daemon/src/daemon-client.ts
+var PortalDaemonClient = class {
+	sessionId = randomUUID();
+	socket = null;
+	disposed = false;
+	reconnectTimer = null;
+	lastBind = null;
+	fallbackCwd = null;
+	wantEnabled = false;
+	pendingGrants = /* @__PURE__ */ new Set();
+	grantedAgentIds = /* @__PURE__ */ new Set();
+	constructor(opts) {
+		this.opts = opts;
+	}
+	/** Spawn the daemon if needed and attach. Idempotent. */
+	async start() {
+		if (this.disposed) return;
+		await ensureDaemonRunning(this.opts.appUrl);
+		this.connect();
+	}
+	connect() {
+		if (this.disposed) return;
+		const { socketPath } = daemonPaths(this.opts.appUrl);
+		const socket = connect(socketPath);
+		socket.setEncoding("utf8");
+		this.socket = socket;
+		const parse = makeLineParser();
+		socket.on("connect", () => {
+			this.send({
+				t: "hello",
+				v: LOCAL_PROTOCOL_VERSION,
+				sessionId: this.sessionId,
+				token: this.opts.sessionToken
+			});
+			if (this.wantEnabled) this.send({ t: "enable" });
+			if (this.fallbackCwd) this.send({
+				t: "cwd",
+				cwd: this.fallbackCwd
+			});
+			if (this.lastBind) this.send({
+				t: "bind",
+				sessionId: this.sessionId,
+				conversationId: this.lastBind.conversationId,
+				cwd: this.lastBind.cwd
+			});
+			for (const agentId of this.pendingGrants) this.send({
+				t: "grant",
+				agentId
+			});
+		});
+		socket.on("data", (chunk) => {
+			for (const line of parse(chunk)) {
+				const msg = parseDaemonMessage(line);
+				if (msg) this.onMessage(msg);
+			}
+		});
+		const onClose = () => {
+			if (this.socket === socket) this.socket = null;
+			this.scheduleReconnect();
+		};
+		socket.on("close", onClose);
+		socket.on("error", onClose);
+	}
+	scheduleReconnect() {
+		if (this.disposed || this.reconnectTimer) return;
+		this.reconnectTimer = setTimeout(() => {
+			this.reconnectTimer = null;
+			this.start();
+		}, 500);
+		this.reconnectTimer.unref();
+	}
+	onMessage(msg) {
+		if (msg.t === "state") {
+			this.grantedAgentIds = new Set(msg.grantedAgentIds);
+			this.opts.onState({
+				status: msg.status,
+				machineName: msg.machineName,
+				friendlyName: msg.friendlyName,
+				error: msg.error,
+				grantedAgentIds: msg.grantedAgentIds
+			});
+		}
+	}
+	/** Whether this agent is currently authorized on the machine (last daemon state). */
+	isGranted(agentId) {
+		return this.grantedAgentIds.has(agentId);
+	}
+	/** Whether the user has turned machine sharing on from this CLI. */
+	isEnabled() {
+		return this.wantEnabled;
+	}
+	send(msg) {
+		if (this.socket?.writable) this.socket.write(encodeLine(msg));
+	}
+	/** Turn machine sharing on (the daemon connects the portal). */
+	enable() {
+		this.wantEnabled = true;
+		this.send({ t: "enable" });
+	}
+	/** Turn machine sharing off. */
+	disable() {
+		this.wantEnabled = false;
+		this.send({ t: "disable" });
+	}
+	/**
+	* Set the directory an exec runs in when the daemon can't place its
+	* conversation. `skydive portal open` shares one directory and has no
+	* conversation of its own, so this is how it routes.
+	*/
+	setFallbackCwd(cwd) {
+		this.fallbackCwd = cwd;
+		this.send({
+			t: "cwd",
+			cwd
+		});
+	}
+	/** Register / update this conversation's working directory for exec routing. */
+	bind(conversationId, cwd) {
+		this.lastBind = {
+			conversationId,
+			cwd
+		};
+		this.send({
+			t: "bind",
+			sessionId: this.sessionId,
+			conversationId,
+			cwd
+		});
+	}
+	/**
+	* Authorize one agent to run commands on this machine. Resolves once the
+	* request is sent to the daemon (the daemon performs the grant and pushes the
+	* updated state); kept async so it's a drop-in for the old in-process client's
+	* awaited `grantAgent`.
+	*/
+	grantAgent(agentId) {
+		this.pendingGrants.add(agentId);
+		this.send({
+			t: "grant",
+			agentId
+		});
+		return Promise.resolve();
+	}
+	/** Detach this CLI. The daemon keeps running for other clients. */
+	dispose() {
+		this.disposed = true;
+		if (this.reconnectTimer) {
+			clearTimeout(this.reconnectTimer);
+			this.reconnectTimer = null;
+		}
+		this.send({
+			t: "bye",
+			sessionId: this.sessionId
+		});
+		try {
+			this.socket?.destroy();
+		} catch (_error) {}
+		this.socket = null;
+	}
+};
+
+//#endregion
+export { PortalDaemonClient as t };

package/dist/js/daemon-client-DlblQIR9.mjs

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+import "./client-Cf7cvftg.mjs";
+import "./daemon-DaUaCMwC.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-CJxbCLOb.mjs";
+
+export { PortalDaemonClient };

package/dist/js/{daemon-wUaIOwEj.mjs → daemon-imLBqTGg.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
 import "./client-Cf7cvftg.mjs";
-import { a as runPortalDaemon, i as queryDaemonStatus, n as ensureDaemonRunning, o as stopDaemon, r as isDaemonListening, t as PortalDaemon } from "./daemon-DOWC0OOB.mjs";
+import { a as runPortalDaemon, i as queryDaemonStatus, n as ensureDaemonRunning, o as stopDaemon, r as isDaemonListening, t as PortalDaemon } from "./daemon-DaUaCMwC.mjs";
 
 export { runPortalDaemon };

package/dist/js/{profiler-Dh7VeDnQ.mjs → profiler-CZtc7-p8.mjs}

@@ -8,7 +8,7 @@ import fs from "node:fs";
 
 //#region package.json
 var name = "skydive-cli";
-var version$1 = "0.4.0-beta.1332";
+var version$1 = "0.4.0-beta.1352";
 
 //#endregion
 //#region src/auth/organization.ts

package/dist/js/raw-pty-3EkG-jjH.mjs

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import "./client-Cn2af31H.mjs";
+import { t as runRawPtyPassthrough } from "./raw-pty-B6mAroiI.mjs";
+
+export { runRawPtyPassthrough };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skydive-cli",
-  "version": "0.4.0-beta.1332",
+  "version": "0.4.0-beta.1352",
   "description": "Skydive CLI — cloud agents from the command line",
   "homepage": "https://skydive.com",
   "license": "MIT",
@@ -41,6 +41,7 @@
     "react-devtools-core": "^7.0.1",
     "safe-stable-stringify": "^2.3.1",
     "semver": "^7.7.4",
+    "shell-quote": "1.9.0",
     "web-tree-sitter": "0.25.10",
     "ws": "^8.21.0",
     "yargs": "^17.7.2",

package/dist/js/raw-pty-skuWh-QO.mjs

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-import "./client-Cn2af31H.mjs";
-import { t as runRawPtyPassthrough } from "./raw-pty-C7PxMDc1.mjs";
-
-export { runRawPtyPassthrough };