skydive-cli 0.4.0-beta.1340 → 0.4.0-beta.1360

package/CHANGELOG.md

@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- `skydive fs` — a namespace for working with the files on an agent's computer (its sandbox) from your own machine. Its first subcommand, `skydive fs edit <path>`, reads a remote file down over the same relay `skydive sandbox` uses, opens it in your local editor (`$VISUAL`/`$EDITOR`, override with `--editor`, defaults to `vi`), and writes your changes back atomically when you save and close — so you can edit a remote file as if it were local without opening the chat TUI. A path that doesn't exist yet is created on save; no changes means nothing is written. Access is gated on EDIT permission for the agent, exactly like `skydive sandbox`. (A first-class `fs` relay channel and `skydive fs mount` land in follow-ups.)
+
 ## [0.4.0] - 2026-08-07
 
 ### Added

package/dist/js/bin.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as ensureActiveOrganization, D as setActiveWorkspace, E as listWorkspaces, O as name, T as getSessionIdentity, a as installCrashHandler, k as version, t as maybeStartProfiling, u as brandHelpArt, w as getActiveWorkspaceId, x as themes } from "./profiler-BoPzxsbP.mjs";
+import { C as ensureActiveOrganization, D as setActiveWorkspace, E as listWorkspaces, O as name, T as getSessionIdentity, a as installCrashHandler, k as version, t as maybeStartProfiling, u as brandHelpArt, w as getActiveWorkspaceId, x as themes } from "./profiler-CHCFyQ51.mjs";
 import { A as getStoredApiKeyWorkspaceName, C as getLastSeenVersion, F as resolveManagementAuth, I as resolveSession, M as resolveAppUrl, N as resolveChatAuth, O as getShareMachineDefault, P as resolveConfig, R as saveConfig, S as getConfigPath, T as getPromptHistoryPath, V as setLastSeenVersion, _ as API_KEY_PREFIX, b as PREFERENCES, g as API_KEY_FAMILY_PREFIX, h as API_KEYS_URL, i as resolveAgent, j as getUpdateCheckDisabled, k as getStoredApiKeyId, v as DEFAULT_API_URL, w as getPreference, x as deleteConfig, z as saveSession } from "./print-CbayCa87.mjs";
 import { n as printError, r as printTable, t as output } from "./output-DYzzdXYV.mjs";
 import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
@@ -10,16 +10,17 @@ import { c as PORTAL_DAEMON_FLAG, i as queryDaemonStatus, l as daemonPaths, n as
 import { t as SandboxStream } from "./client-Cn2af31H.mjs";
 import { hideBin } from "yargs/helpers";
 import yargs from "yargs";
-import os, { hostname } from "node:os";
-import path from "node:path";
+import os, { hostname, tmpdir } from "node:os";
+import path, { join } from "node:path";
 import { err, ok } from "neverthrow";
 import { z } from "zod";
 import open from "open";
 import fs from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
-import { createHash } from "node:crypto";
+import { createHash, randomBytes } from "node:crypto";
 import zlib from "node:zlib";
-import fsp from "node:fs/promises";
+import fsp, { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { quote } from "shell-quote";
 import semver from "semver";
 import { createInterface } from "node:readline";
 
@@ -1515,7 +1516,7 @@ const importCommand = {
 				process.exit(1);
 			}
 		}
-		const { runChat } = await import("./boot-Cz7I47B-.mjs");
+		const { runChat } = await import("./boot-DwKlGj-L.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
@@ -1927,7 +1928,7 @@ const chatCommand = {
 			sessionToken: auth.value.token,
 			agentSelector: argv.agent ?? null
 		});
-		const { runChat } = await import("./boot-Cz7I47B-.mjs");
+		const { runChat } = await import("./boot-DwKlGj-L.mjs");
 		await runChat({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -2286,7 +2287,7 @@ const switchCommand = {
 				printError("The workspace picker needs the Bun runtime and it could not be set up automatically. Pass a workspace slug instead, or install Bun and retry.");
 				process.exit(1);
 			}
-			const { runWorkspacePicker } = await import("./boot-Cz7I47B-.mjs");
+			const { runWorkspacePicker } = await import("./boot-DwKlGj-L.mjs");
 			await runWorkspacePicker(session);
 			return;
 		}
@@ -2600,7 +2601,7 @@ const portalCommand = {
 //#endregion
 //#region src/commands/sandbox.ts
 /** POSIX single-quote one word so the remote shell treats it as one token. */
-function shellQuote(word) {
+function shellQuote$1(word) {
 	if (/^[A-Za-z0-9_@%+=:,./-]+$/.test(word)) return word;
 	return `'${word.replace(/'/g, `'\\''`)}'`;
 }
@@ -2615,7 +2616,7 @@ function shellQuote(word) {
 * for too. yargs number-coerces bare numerals, so words are stringified.
 */
 function joinCommandWords(words) {
-	return words.map(String).map(shellQuote).join(" ").trim();
+	return words.map(String).map(shellQuote$1).join(" ").trim();
 }
 /**
 * `skydive sandbox` — the standalone counterpart to the chat TUI's `/sandbox`
@@ -2720,6 +2721,275 @@ async function runPty({ session, agentId, agentName }) {
 	return result.code;
 }
 
+//#endregion
+//#region src/commands/fs.ts
+/**
+* POSIX-quote one word so the remote shell treats it as a single token. Wraps
+* `shell-quote`'s `quote` (already a repo dependency, used elsewhere in the
+* CLI) rather than hand-rolling the escaping — it is the well-tested source of
+* truth for making a path/arg with spaces, quotes, `$`, `;`, globs, etc. inert
+* when interpolated into an `sh -c` line.
+*/
+function shellQuote(word) {
+	return quote([word]);
+}
+const MISSING_FILE_EXIT = 44;
+/**
+* Build the remote shell command that base64-encodes a file to stdout. Exits
+* {@link MISSING_FILE_EXIT} when the path doesn't exist, 1 when it's a
+* directory, so the caller can tell "create new" from a genuine error.
+*/
+function buildReadCommand(path) {
+	const q = shellQuote(path);
+	return `sh -c ${shellQuote(`if [ ! -e ${q} ]; then exit ${MISSING_FILE_EXIT}; fi; if [ -d ${q} ]; then echo 'path is a directory' >&2; exit 1; fi; base64 < ${q}`)}`;
+}
+/**
+* Build the remote shell command that decodes `b64` and writes it to `path`
+* atomically (temp file + `mv`) so a dropped connection can't truncate the
+* original in place. `token` is a caller-supplied unique suffix for the temp
+* file — generated in JS (not the shell's `$$`, which shell-quote would escape
+* to a literal, so every write would collide on the same temp name).
+*/
+function buildWriteCommand(path, b64, token) {
+	const tmp = `${path}.skydive-edit.${token}`;
+	return `sh -c ${shellQuote(`printf %s ${shellQuote(b64)} | base64 -d > ${shellQuote(tmp)} && mv -f ${shellQuote(tmp)} ${shellQuote(path)}`)}`;
+}
+/**
+* Resolve the editor command from an explicit override, then $VISUAL, $EDITOR,
+* then `vi`. Split so `EDITOR="code --wait"` (command + flags) is honored.
+*/
+function resolveEditor(override, env) {
+	const parts = (override || env.VISUAL || env.EDITOR || "vi").split(/\s+/).filter(Boolean);
+	return {
+		bin: parts[0] ?? "vi",
+		args: parts.slice(1)
+	};
+}
+/**
+* `skydive fs edit <path>` — edit a file that lives on the agent's computer
+* (its sandbox) with your LOCAL editor. It reads the remote file down over the
+* same relay `skydive sandbox` uses, opens it in `$EDITOR`, and writes your
+* changes back when you save and close — so you edit a remote file as if it
+* were local, without opening the chat TUI.
+*
+* There is no server-side "file" endpoint yet: this rides entirely on the
+* existing one-shot `exec` mode of the sandbox stream. Contents move
+* base64-encoded in BOTH directions (exec has no stdin, so the write payload is
+* embedded in the command string) which keeps binary bytes, trailing newlines,
+* and CRLF intact. Access gating (EDIT on the agent + the sandbox kill switch)
+* is enforced by the relay, exactly as for `skydive sandbox`. A future PR adds
+* a first-class `fs` channel that `edit` (and `fs mount`) will ride instead.
+*/
+const fsEditCommand = {
+	command: "edit <path>",
+	describe: "Edit a file on the agent's computer (its sandbox) with your local $EDITOR",
+	builder: (y) => y.positional("path", {
+		type: "string",
+		demandOption: true,
+		describe: "Absolute or sandbox-relative path of the file to edit"
+	}).option("agent", {
+		type: "string",
+		describe: "Target agent, by id, slug, or name. Optional when the account has exactly one agent."
+	}).option("editor", {
+		type: "string",
+		describe: "Editor command to open (defaults to $VISUAL, then $EDITOR, then vi)"
+	}).example("skydive fs edit --agent grace /tmp/notes.md", "Edit a remote file").example("EDITOR=nano skydive fs edit /home/user/.self/soul.md", "Pick the editor via $EDITOR"),
+	handler: async (argv) => {
+		const session = requireSession(argv);
+		const remotePath = argv.path;
+		const { createRestClient } = await import("./rest-DADJh0bi.mjs");
+		const { resolveAgent } = await import("./print-ba_0hiV9.mjs");
+		const client = createRestClient({
+			appUrl: session.appUrl,
+			sessionToken: session.sessionToken
+		});
+		let agent;
+		try {
+			agent = resolveAgent(await client.listAgents({
+				scope: "org",
+				onPage: null
+			}), argv.agent ?? null);
+		} catch (error) {
+			printError(error instanceof Error ? error.message : String(error));
+			process.exit(1);
+		}
+		const opts = {
+			session,
+			agentId: agent.id
+		};
+		console.error(`Reading ${remotePath} from ${agent.name}'s sandbox…`);
+		const read = await readRemote({
+			...opts,
+			path: remotePath
+		});
+		if (read.kind === "error") {
+			printError(read.message);
+			process.exit(1);
+		}
+		const original = read.content;
+		if (read.kind === "missing") console.error(`${remotePath} does not exist yet — it will be created when you save.`);
+		const dir = await mkdtemp(join(tmpdir(), "skydive-edit-"));
+		const local = join(dir, remotePath.split("/").pop() || "file");
+		try {
+			await writeFile(local, original);
+			if (!await openEditor(argv.editor, local)) {
+				printError("Editor exited non-zero; not saving any changes.");
+				process.exit(1);
+			}
+			const edited = await readFile(local);
+			if (edited.equals(original)) {
+				console.error("No changes — nothing written.");
+				process.exit(0);
+			}
+			console.error(`Writing changes back to ${remotePath}…`);
+			const wrote = await writeRemote({
+				...opts,
+				path: remotePath,
+				content: edited
+			});
+			if (wrote.kind === "error") {
+				printError(`${wrote.message}\nYour edited copy is kept at ${local} so you don't lose it.`);
+				process.exit(1);
+			}
+			console.error("Saved.");
+			process.exit(0);
+		} finally {
+			await rm(dir, {
+				recursive: true,
+				force: true
+			}).catch((error) => {
+				console.error(`Note: could not remove temp dir ${dir}: ${error instanceof Error ? error.message : String(error)}`);
+			});
+		}
+	}
+};
+/**
+* Read a remote file as bytes. Runs `base64` on the file in the sandbox and
+* decodes the streamed stdout locally. Distinguishes "file is missing" (exit
+* code 44, so `edit` can create it) from a real read failure.
+*/
+function readRemote({ session, agentId, path }) {
+	const command = buildReadCommand(path);
+	const chunks = [];
+	const stderr = [];
+	return new Promise((resolve) => {
+		SandboxStream.open({
+			mode: "exec",
+			appUrl: session.appUrl,
+			sessionToken: session.sessionToken,
+			agentId,
+			command,
+			onEvent: (e) => {
+				switch (e.type) {
+					case "data":
+						chunks.push(Buffer.from(e.bytes));
+						break;
+					case "exit":
+						if (e.code === MISSING_FILE_EXIT) resolve({
+							kind: "missing",
+							content: Buffer.alloc(0)
+						});
+						else if (e.code === 0) resolve({
+							kind: "ok",
+							content: Buffer.from(Buffer.concat(chunks).toString("utf8").replace(/\s+/g, ""), "base64")
+						});
+						else resolve({
+							kind: "error",
+							message: stderr.join("").trim() || `Could not read the file (exit ${e.code}).`
+						});
+						break;
+					case "error":
+						stderr.push(e.message);
+						break;
+					case "close":
+						resolve({
+							kind: "error",
+							message: e.failure || "The connection to the sandbox closed before the file could be read."
+						});
+						break;
+				}
+			}
+		});
+	});
+}
+/**
+* Write bytes to a remote file. Exec has no stdin, so the base64 payload is
+* embedded in the command and decoded on the far side. Writes atomically via a
+* temp file + `mv` so a dropped connection mid-write can't leave a truncated
+* file in place of the original.
+*/
+function writeRemote({ session, agentId, path, content }) {
+	const token = randomBytes(6).toString("hex");
+	const command = buildWriteCommand(path, content.toString("base64"), token);
+	const stderr = [];
+	return new Promise((resolve) => {
+		SandboxStream.open({
+			mode: "exec",
+			appUrl: session.appUrl,
+			sessionToken: session.sessionToken,
+			agentId,
+			command,
+			onEvent: (e) => {
+				switch (e.type) {
+					case "data":
+						stderr.push(Buffer.from(e.bytes).toString("utf8"));
+						break;
+					case "exit":
+						resolve(e.code === 0 ? { kind: "ok" } : {
+							kind: "error",
+							message: stderr.join("").trim() || `Could not write the file (exit ${e.code}).`
+						});
+						break;
+					case "error":
+						stderr.push(e.message);
+						break;
+					case "close":
+						resolve({
+							kind: "error",
+							message: e.failure || "The connection to the sandbox closed before the file was written."
+						});
+						break;
+				}
+			}
+		});
+	});
+}
+/**
+* Open `file` in the caller's editor and resolve to whether it exited cleanly.
+* Precedence: explicit `--editor`, then $VISUAL, $EDITOR, then `vi`. The editor
+* inherits the real TTY so full-screen editors (vim/nano) work.
+*/
+function openEditor(override, file) {
+	const { bin, args: editorArgs } = resolveEditor(override, process.env);
+	const args = [...editorArgs, file];
+	return new Promise((resolve) => {
+		const child = spawn(bin, args, { stdio: "inherit" });
+		child.on("error", (err) => {
+			printError(`Could not launch editor "${bin}": ${err.message}`);
+			resolve(false);
+		});
+		child.on("exit", (code) => resolve(code === 0));
+	});
+}
+/**
+* `skydive fs` — work with the files on an agent's computer (its sandbox) from
+* your own machine. The namespace for filesystem access:
+*
+*   - `fs edit <path>`  edit one remote file with your local editor (shipped).
+*   - `fs mount <dir>`  mount the whole sandbox filesystem locally (coming in a
+*                       later PR, on a first-class `fs` relay channel).
+*
+* Grouping these under one command keeps the file surface discoverable and
+* leaves room to grow (`fs ls`, `fs cat`, `fs pull`) without adding more
+* top-level commands.
+*/
+const fsCommand = {
+	command: "fs <command>",
+	describe: "Work with the files on an agent's computer (its sandbox)",
+	builder: (y) => y.command(fsEditCommand).demandCommand(1, "Specify a subcommand: edit"),
+	handler: () => {}
+};
+
 //#endregion
 //#region src/update-check/manifest.ts
 /**
@@ -3528,7 +3798,7 @@ const configCommand = {
 //#endregion
 //#region src/cli.ts
 function createCli(argv) {
-	return yargs(argv).scriptName("skydive").usage("$0 <command> [options]").parserConfiguration({ "populate--": true }).example("skydive auth login", "Store your API key").example("skydive chat", "Open the interactive chat TUI (prod)").example("skydive chat --api-url http://localhost:4500", "Chat against a local dev API").example("skydive agents list", "List your agents").example("skydive completion install", "Set up TAB completion for your shell").example("skydive keys create \"my-key\"", "Create an API key").example("skydive secrets set OPENAI_API_KEY --agent-id <id>", "Set a secret (value from stdin)").example("skydive workspace list", "List workspaces on your account").example("skydive config set updateCheck false", "Disable the daily update check").example("skydive workspace switch acme-team", "Switch the workspace all `skydive` commands act on").example("skydive portal open --agent grace", "Open the portal to this machine for an agent, headless (no TUI)").option("json", {
+	return yargs(argv).scriptName("skydive").usage("$0 <command> [options]").parserConfiguration({ "populate--": true }).example("skydive auth login", "Store your API key").example("skydive chat", "Open the interactive chat TUI (prod)").example("skydive chat --api-url http://localhost:4500", "Chat against a local dev API").example("skydive agents list", "List your agents").example("skydive completion install", "Set up TAB completion for your shell").example("skydive keys create \"my-key\"", "Create an API key").example("skydive secrets set OPENAI_API_KEY --agent-id <id>", "Set a secret (value from stdin)").example("skydive workspace list", "List workspaces on your account").example("skydive config set updateCheck false", "Disable the daily update check").example("skydive workspace switch acme-team", "Switch the workspace all `skydive` commands act on").example("skydive portal open --agent grace", "Open the portal to this machine for an agent, headless (no TUI)").example("skydive fs edit --agent grace /tmp/notes.md", "Edit a file on the agent's computer with your local editor").option("json", {
 		type: "boolean",
 		default: false,
 		global: true,
@@ -3542,7 +3812,7 @@ function createCli(argv) {
 		type: "string",
 		global: true,
 		describe: "Override API base URL"
-	}).command(authCommand).command(chatCommand).command(messagesCommand).command(conversationsCommand).command(agentsCommand).command(importCommand).command(keysCommand).command(secretsCommand).command(workspaceCommand).command(portalCommand).command(sandboxCommand).command(updateCommand).command(configCommand).command(completionCommand).demandCommand(1, "Specify a command. Run --help for usage.").strict().wrap(null).version(version).alias("v", "version").alias("h", "help").help().fail((msg, err) => {
+	}).command(authCommand).command(chatCommand).command(messagesCommand).command(conversationsCommand).command(agentsCommand).command(importCommand).command(keysCommand).command(secretsCommand).command(workspaceCommand).command(portalCommand).command(sandboxCommand).command(fsCommand).command(updateCommand).command(configCommand).command(completionCommand).demandCommand(1, "Specify a command. Run --help for usage.").strict().wrap(null).version(version).alias("v", "version").alias("h", "help").help().fail((msg, err) => {
 		printError(err ? err instanceof Error ? err.message : String(err) : msg ?? "Unknown error");
 		process.exit(1);
 	});
@@ -3755,7 +4025,7 @@ function setupUpdateCheck(argv) {
 
 //#endregion
 //#region src/changelog.generated.ts
-const CHANGELOG_MD = "# Changelog\n\nAll notable changes to the Skydive CLI are documented here.\n\nThe format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),\nand this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n\n## [Unreleased]\n\n## [0.4.0] - 2026-08-07\n\n### Added\n\n- `skydive chat` works with API key auth: an API key alone now opens the chat TUI (and headless `chat -p`) without a browser login, using the key's pinned workspace.\n- `skydive config` command to view and set the safe, hand-editable CLI preferences (`shareMachineDefault`, `updateCheck`) without opening `config.json`. `config`/`config list` shows each key, its effective value, and whether it comes from the file or the built-in default; `config get`/`set`/`unset` read and change one key; `config path` prints the config file location. It only ever touches those preference keys, never credentials or flow-managed state.\n- Billing-blocked sends and runs now surface the server-authored recovery\n  guidance from the typed billing outcome. The chat TUI renders it as a\n  warning-toned system-notice row — live when a send is refused or a run is\n  stopped at the billing boundary, and again when reopening a conversation\n  that holds a persisted billing notice — instead of a generic error.\n  Headless `chat -p` and `messages get` print the guidance (state, recovery\n  step, and manage-billing URL) on stderr, keep any partial output already\n  streamed on stdout, and exit with code `5` (distinct from the generic `1`)\n  so scripted callers can tell a billing pause from a failure.\n- Syntax highlighting for 14 more languages in the chat transcript and file/review panes (python, bash, go, rust, c, cpp, java, ruby, css, html, json, yaml, and more) — previously only JavaScript/TypeScript rendered colored.\n\n### Changed\n\n- `skydive agent list` lists the full agent roster by default instead of a truncated page.\n\n### Fixed\n\n- Long multi-line bash tool-call commands (e.g. heredocs) are clamped with a `+N more · click to expand` tail instead of dumping their whole body into the scrollback.\n- Tool error output is clipped the same way as ok output, so a failing command no longer floods the transcript.\n- The TUI toast overlay has an opaque background instead of letting the transcript bleed through.\n\n## [0.3.0] - 2026-08-04\n\n### Added\n\n**Chat TUI**\n\n- `/fork` slash command to fork a conversation at any point and continue in a new thread.\n- `/conversation` switches threads from inside a live session.\n- `/compact` triggers manual conversation compaction.\n- `/portal` and `/copy` slash commands.\n- Archive the current conversation from the chat TUI.\n- `--new` flag on `skydive chat` to start a fresh conversation.\n- Debounced server-side conversation search in the picker, with title matches ranked first.\n- File review pane orientation toggle, and review comments in the file pane.\n- Pinned plan card controls and a jump-to-latest hint.\n- Terminal title (OSC) follows the live conversation title on every screen; inside cmux the workspace is renamed too, and linked PRs are pushed to the cmux sidebar.\n- Every participating agent shows in the conversation list; connect cards each have their own identity, and ctrl+r asks which connect card to act on.\n- Colored Skydive splash art in `skydive --help` and the TUI pickers.\n- New-agent name prefilled from the server's suggestion.\n\n**CLI & platform**\n\n- `skydive update` self-updater, with an update notice when a new version is available.\n- Shell completions for bash, zsh, and fish via `completion install`.\n- Portal daemon: one connection per host with per-conversation working directories.\n- Agent-led coding-agent import (`skydive import`).\n- Per-workspace scoping on the REST client, and cross-org `--agent <uuid>` auto-switches workspace.\n- `skydive-beta` wrapper for the canary channel.\n\n### Fixed\n\n- `skydive update` no longer claims an update is available on every npm install.\n- Chat memory is bounded (payload clamps + windowed rows) with a memory watchdog and OOM diagnostic report; transcript rows are memoized so streaming stops re-rendering the whole chat.\n- Chat-send failures map to real error messages.\n- Notification and sidebar previews use the last text block of the reply and strip inline markdown.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n- Sending to non-web channel conversations is blocked in the TUI.\n- GitHub bot connect opens on the web front door, not api.skydive.com.\n- TUI activity counter times from the run, not the screen.\n\n## [0.2.0] - 2026-07-29\n\n### Added\n\n**Sandbox & machine access**\n\n- Standalone `skydive sandbox` command for direct access to an agent's sandbox.\n- `/sandbox` in the chat TUI — live PTY session and one-shot command execution.\n- Headless machine sharing via `skydive portal`, with self-registering portal grants.\n- `shareMachineDefault` config key for always-on portal sharing.\n\n**Chat TUI**\n\n- File pane (`ctrl+g`) with Changes and Files tabs: a shared file tree plus source viewer and a workspace browser, mouse-resizable and responsive to terminal size.\n- Agent todo list rendered in the chat TUI, above the composer, mirroring the web chat's todo card.\n- Fuzzy finder in the conversation and agent pickers.\n- Slash-command autocomplete menu.\n- Paste or drag-and-drop any file into the composer; paste clipboard images with Cmd+V.\n- Run local shell commands with `!` in the composer.\n- Conversation recaps, streamed live title updates, and per-agent attribution on assistant turns.\n- Working timer rolls up into minutes and hours.\n- Conversation picker paginates past 50 conversations and shows only your own conversations.\n- Esc leaves a live run; typing `exit` quits the chat.\n- Cursor Dark theme.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n\n**Headless & scripting**\n\n- Resume a conversation by id.\n- `conversations list` and `conversations show` for transcript reads.\n- `messages get`, with run recovery keyed on message id.\n- Connect cards surface in headless `-p` mode so a driving agent never gets stuck.\n\n**Authentication**\n\n- `skydive auth login` via the browser now auto-mints an API key, so one login yields both a chat session and a usable management credential. Management commands announce the key's pinned workspace when it drives them, so a workspace mismatch is visible at use time.\n- Workspace picker on the device authorization page.\n- Account and workspace identity shown in `auth status`.\n\n**Platform**\n\n- Standalone binary builds compiling the CLI into a per-target executable.\n- Interactive workspace switcher; management commands follow the active workspace.\n- Terminal host integrations and agent notifications.\n\n### Fixed\n\n- Transcript errors collapse to one line, click to expand (REST and portal errors keep their full body).\n- Dragged/pasted image file paths attach the file instead of inserting path text, including macOS paths with literal parentheses.\n- Bare URLs in chat markdown are hyperlinked so they survive text wrap.\n- Composer draft is preserved across TUI overlays.\n- Relative connect links resolve before opening the browser.\n- Numbered markdown headings render colored in the TUI.\n- Chat transcript pages by 75% of a screen; picker rows stay on one line.\n- Run starts push to the TUI over the conversation stream.\n- Security: remediated high-severity dependency findings and cleared tar/shell-quote CVEs.\n\n## [0.1.0] - 2026-07-21\n\nInitial public release: `skydive chat` TUI, agent and conversation management,\ndevice authorization, and headless `-p` mode.\n";
+const CHANGELOG_MD = "# Changelog\n\nAll notable changes to the Skydive CLI are documented here.\n\nThe format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),\nand this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n\n## [Unreleased]\n\n### Added\n\n- `skydive fs` — a namespace for working with the files on an agent's computer (its sandbox) from your own machine. Its first subcommand, `skydive fs edit <path>`, reads a remote file down over the same relay `skydive sandbox` uses, opens it in your local editor (`$VISUAL`/`$EDITOR`, override with `--editor`, defaults to `vi`), and writes your changes back atomically when you save and close — so you can edit a remote file as if it were local without opening the chat TUI. A path that doesn't exist yet is created on save; no changes means nothing is written. Access is gated on EDIT permission for the agent, exactly like `skydive sandbox`. (A first-class `fs` relay channel and `skydive fs mount` land in follow-ups.)\n\n## [0.4.0] - 2026-08-07\n\n### Added\n\n- `skydive chat` works with API key auth: an API key alone now opens the chat TUI (and headless `chat -p`) without a browser login, using the key's pinned workspace.\n- `skydive config` command to view and set the safe, hand-editable CLI preferences (`shareMachineDefault`, `updateCheck`) without opening `config.json`. `config`/`config list` shows each key, its effective value, and whether it comes from the file or the built-in default; `config get`/`set`/`unset` read and change one key; `config path` prints the config file location. It only ever touches those preference keys, never credentials or flow-managed state.\n- Billing-blocked sends and runs now surface the server-authored recovery\n  guidance from the typed billing outcome. The chat TUI renders it as a\n  warning-toned system-notice row — live when a send is refused or a run is\n  stopped at the billing boundary, and again when reopening a conversation\n  that holds a persisted billing notice — instead of a generic error.\n  Headless `chat -p` and `messages get` print the guidance (state, recovery\n  step, and manage-billing URL) on stderr, keep any partial output already\n  streamed on stdout, and exit with code `5` (distinct from the generic `1`)\n  so scripted callers can tell a billing pause from a failure.\n- Syntax highlighting for 14 more languages in the chat transcript and file/review panes (python, bash, go, rust, c, cpp, java, ruby, css, html, json, yaml, and more) — previously only JavaScript/TypeScript rendered colored.\n\n### Changed\n\n- `skydive agent list` lists the full agent roster by default instead of a truncated page.\n\n### Fixed\n\n- Long multi-line bash tool-call commands (e.g. heredocs) are clamped with a `+N more · click to expand` tail instead of dumping their whole body into the scrollback.\n- Tool error output is clipped the same way as ok output, so a failing command no longer floods the transcript.\n- The TUI toast overlay has an opaque background instead of letting the transcript bleed through.\n\n## [0.3.0] - 2026-08-04\n\n### Added\n\n**Chat TUI**\n\n- `/fork` slash command to fork a conversation at any point and continue in a new thread.\n- `/conversation` switches threads from inside a live session.\n- `/compact` triggers manual conversation compaction.\n- `/portal` and `/copy` slash commands.\n- Archive the current conversation from the chat TUI.\n- `--new` flag on `skydive chat` to start a fresh conversation.\n- Debounced server-side conversation search in the picker, with title matches ranked first.\n- File review pane orientation toggle, and review comments in the file pane.\n- Pinned plan card controls and a jump-to-latest hint.\n- Terminal title (OSC) follows the live conversation title on every screen; inside cmux the workspace is renamed too, and linked PRs are pushed to the cmux sidebar.\n- Every participating agent shows in the conversation list; connect cards each have their own identity, and ctrl+r asks which connect card to act on.\n- Colored Skydive splash art in `skydive --help` and the TUI pickers.\n- New-agent name prefilled from the server's suggestion.\n\n**CLI & platform**\n\n- `skydive update` self-updater, with an update notice when a new version is available.\n- Shell completions for bash, zsh, and fish via `completion install`.\n- Portal daemon: one connection per host with per-conversation working directories.\n- Agent-led coding-agent import (`skydive import`).\n- Per-workspace scoping on the REST client, and cross-org `--agent <uuid>` auto-switches workspace.\n- `skydive-beta` wrapper for the canary channel.\n\n### Fixed\n\n- `skydive update` no longer claims an update is available on every npm install.\n- Chat memory is bounded (payload clamps + windowed rows) with a memory watchdog and OOM diagnostic report; transcript rows are memoized so streaming stops re-rendering the whole chat.\n- Chat-send failures map to real error messages.\n- Notification and sidebar previews use the last text block of the reply and strip inline markdown.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n- Sending to non-web channel conversations is blocked in the TUI.\n- GitHub bot connect opens on the web front door, not api.skydive.com.\n- TUI activity counter times from the run, not the screen.\n\n## [0.2.0] - 2026-07-29\n\n### Added\n\n**Sandbox & machine access**\n\n- Standalone `skydive sandbox` command for direct access to an agent's sandbox.\n- `/sandbox` in the chat TUI — live PTY session and one-shot command execution.\n- Headless machine sharing via `skydive portal`, with self-registering portal grants.\n- `shareMachineDefault` config key for always-on portal sharing.\n\n**Chat TUI**\n\n- File pane (`ctrl+g`) with Changes and Files tabs: a shared file tree plus source viewer and a workspace browser, mouse-resizable and responsive to terminal size.\n- Agent todo list rendered in the chat TUI, above the composer, mirroring the web chat's todo card.\n- Fuzzy finder in the conversation and agent pickers.\n- Slash-command autocomplete menu.\n- Paste or drag-and-drop any file into the composer; paste clipboard images with Cmd+V.\n- Run local shell commands with `!` in the composer.\n- Conversation recaps, streamed live title updates, and per-agent attribution on assistant turns.\n- Working timer rolls up into minutes and hours.\n- Conversation picker paginates past 50 conversations and shows only your own conversations.\n- Esc leaves a live run; typing `exit` quits the chat.\n- Cursor Dark theme.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n\n**Headless & scripting**\n\n- Resume a conversation by id.\n- `conversations list` and `conversations show` for transcript reads.\n- `messages get`, with run recovery keyed on message id.\n- Connect cards surface in headless `-p` mode so a driving agent never gets stuck.\n\n**Authentication**\n\n- `skydive auth login` via the browser now auto-mints an API key, so one login yields both a chat session and a usable management credential. Management commands announce the key's pinned workspace when it drives them, so a workspace mismatch is visible at use time.\n- Workspace picker on the device authorization page.\n- Account and workspace identity shown in `auth status`.\n\n**Platform**\n\n- Standalone binary builds compiling the CLI into a per-target executable.\n- Interactive workspace switcher; management commands follow the active workspace.\n- Terminal host integrations and agent notifications.\n\n### Fixed\n\n- Transcript errors collapse to one line, click to expand (REST and portal errors keep their full body).\n- Dragged/pasted image file paths attach the file instead of inserting path text, including macOS paths with literal parentheses.\n- Bare URLs in chat markdown are hyperlinked so they survive text wrap.\n- Composer draft is preserved across TUI overlays.\n- Relative connect links resolve before opening the browser.\n- Numbered markdown headings render colored in the TUI.\n- Chat transcript pages by 75% of a screen; picker rows stay on one line.\n- Run starts push to the TUI over the conversation stream.\n- Security: remediated high-severity dependency findings and cleared tar/shell-quote CVEs.\n\n## [0.1.0] - 2026-07-21\n\nInitial public release: `skydive chat` TUI, agent and conversation management,\ndevice authorization, and headless `-p` mode.\n";
 
 //#endregion
 //#region src/whats-new.ts

package/dist/js/{boot-Cz7I47B-.mjs → boot-DwKlGj-L.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { D as setActiveWorkspace, E as listWorkspaces, S as themesForMode, _ as themeForMode, a as installCrashHandler, b as themeVersion, c as MARK_CELLS, d as DEFAULT_THEME_ID, f as applyTheme, g as theme, h as noColorRequested, i as writeArtifact, l as WORDMARK, m as monoTheme, n as profilingEnabled, o as buildCrashReport, p as findTheme, r as record, s as writeCrashReport, v as themeMode, w as getActiveWorkspaceId, y as themeModeFromColorFgBg } from "./profiler-BoPzxsbP.mjs";
+import { D as setActiveWorkspace, E as listWorkspaces, S as themesForMode, _ as themeForMode, a as installCrashHandler, b as themeVersion, c as MARK_CELLS, d as DEFAULT_THEME_ID, f as applyTheme, g as theme, h as noColorRequested, i as writeArtifact, l as WORDMARK, m as monoTheme, n as profilingEnabled, o as buildCrashReport, p as findTheme, r as record, s as writeCrashReport, v as themeMode, w as getActiveWorkspaceId, y as themeModeFromColorFgBg } from "./profiler-CHCFyQ51.mjs";
 import { B as saveTheme, D as getSavedTheme, E as getReviewStateDir, L as resolveWebUrl, S as getConfigPath, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, i as resolveAgent, l as parseExternalOauthConnectParams, m as specKeyFor, p as parseConnectCard, s as MASK_CHAR, u as parseOauthConnectParams, v as DEFAULT_API_URL, y as DEFAULT_APP_URL } from "./print-CbayCa87.mjs";
 import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
 import { a as isRecord, i as errorMessage, n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-BY2nADw5.mjs";

package/dist/js/{profiler-BoPzxsbP.mjs → profiler-CHCFyQ51.mjs}

@@ -8,7 +8,7 @@ import fs from "node:fs";
 
 //#region package.json
 var name = "skydive-cli";
-var version$1 = "0.4.0-beta.1340";
+var version$1 = "0.4.0-beta.1360";
 
 //#endregion
 //#region src/auth/organization.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skydive-cli",
-  "version": "0.4.0-beta.1340",
+  "version": "0.4.0-beta.1360",
   "description": "Skydive CLI — cloud agents from the command line",
   "homepage": "https://skydive.com",
   "license": "MIT",
@@ -41,6 +41,7 @@
     "react-devtools-core": "^7.0.1",
     "safe-stable-stringify": "^2.3.1",
     "semver": "^7.7.4",
+    "shell-quote": "1.9.0",
     "web-tree-sitter": "0.25.10",
     "ws": "^8.21.0",
     "yargs": "^17.7.2",