skydive-cli 0.4.0 → 0.4.1-beta.2

package/dist/js/bin.mjs

@@ -1,24 +1,26 @@
 #!/usr/bin/env node
-import { C as setActiveWorkspace, S as listWorkspaces, T as version, _ as themes, b as getActiveWorkspaceId, o as brandHelpArt, t as installCrashHandler, w as name, x as getSessionIdentity, y as ensureActiveOrganization } from "./install-Ba-UTi-l.mjs";
-import { A as getStoredApiKeyWorkspaceName, C as getLastSeenVersion, F as resolveManagementAuth, I as resolveSession, M as resolveAppUrl, N as resolveChatAuth, O as getShareMachineDefault, P as resolveConfig, R as saveConfig, S as getConfigPath, T as getPromptHistoryPath, V as setLastSeenVersion, _ as API_KEY_PREFIX, b as PREFERENCES, g as API_KEY_FAMILY_PREFIX, h as API_KEYS_URL, i as resolveAgent, j as getUpdateCheckDisabled, k as getStoredApiKeyId, v as DEFAULT_API_URL, w as getPreference, x as deleteConfig, z as saveSession } from "./print-X2N5wJ5l.mjs";
+import { C as ensureActiveOrganization, D as setActiveWorkspace, E as listWorkspaces, O as name, T as getSessionIdentity, a as installCrashHandler, k as version, t as maybeStartProfiling, u as brandHelpArt, w as getActiveWorkspaceId, x as themes } from "./profiler-BA-c3-gP.mjs";
+import { A as getStoredApiKeyWorkspaceName, C as getLastSeenVersion, F as resolveManagementAuth, I as resolveSession, M as resolveAppUrl, N as resolveChatAuth, O as getShareMachineDefault, P as resolveConfig, R as saveConfig, S as getConfigPath, T as getPromptHistoryPath, V as setLastSeenVersion, _ as API_KEY_PREFIX, b as PREFERENCES, g as API_KEY_FAMILY_PREFIX, h as API_KEYS_URL, i as resolveAgent, j as getUpdateCheckDisabled, k as getStoredApiKeyId, v as DEFAULT_API_URL, w as getPreference, x as deleteConfig, z as saveSession } from "./print-CbayCa87.mjs";
 import { n as printError, r as printTable, t as output } from "./output-DYzzdXYV.mjs";
-import { n as createRestClient, t as HttpError } from "./rest-imDZZGQA.mjs";
-import "./billing-blocked-CwfG1BTR.mjs";
-import { a as registerPortalDevice, i as grantPortalAccess, n as fetchPortalDevices, o as revokePortalAccess, r as findThisDevice, s as machineIdentity } from "./client-CKzK-12y.mjs";
-import { c as PORTAL_DAEMON_FLAG, i as queryDaemonStatus, l as daemonPaths, n as ensureDaemonRunning, o as stopDaemon } from "./daemon-CaFz7Wtw.mjs";
-import { t as SandboxStream } from "./client-D8s9vY4p.mjs";
+import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
+import { t as createRestClient } from "./rest-BY2nADw5.mjs";
+import "./billing-blocked-2wju4gC_.mjs";
+import { a as registerPortalDevice, c as machineIdentity, i as grantPortalAccess, n as fetchPortalDevices, o as revokePortalAccess, r as findThisDevice } from "./client-Cf7cvftg.mjs";
+import { c as PORTAL_DAEMON_FLAG, i as queryDaemonStatus, l as daemonPaths, n as ensureDaemonRunning, o as stopDaemon } from "./daemon-DaUaCMwC.mjs";
+import { t as SandboxStream } from "./client-Cn2af31H.mjs";
 import { hideBin } from "yargs/helpers";
 import yargs from "yargs";
-import os, { hostname } from "node:os";
-import path from "node:path";
+import os, { hostname, tmpdir } from "node:os";
+import path, { join } from "node:path";
 import { err, ok } from "neverthrow";
 import { z } from "zod";
 import open from "open";
 import fs from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
-import { createHash } from "node:crypto";
+import { createHash, randomBytes } from "node:crypto";
 import zlib from "node:zlib";
-import fsp from "node:fs/promises";
+import fsp, { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { quote } from "shell-quote";
 import semver from "semver";
 import { createInterface } from "node:readline";
 
@@ -177,7 +179,7 @@ var SkydiveApiClient = class {
 				if (body.error && typeof body.error === "string") message = body.error;
 				else if (body.error?.message) message = body.error.message;
 			} catch {}
-			if (response.status === 401 && this.authKind === "session") message = `${message} — your chat session may have expired. Run \`skydive auth login\`.`;
+			if (response.status === 401 && this.authKind === "session") message = `${message}. Your chat session may have expired. Run \`skydive auth login\`.`;
 			return err({
 				message,
 				status: response.status
@@ -531,7 +533,7 @@ async function runBrowserLogin(argv) {
 		appUrl,
 		sessionToken
 	})).unwrapOr(null);
-	const keyName = identity?.activeWorkspaceName ? `CLI (${hostname()}) — ${identity.activeWorkspaceName}` : `CLI (${hostname()})`;
+	const keyName = identity?.activeWorkspaceName ? `CLI (${hostname()}) for ${identity.activeWorkspaceName}` : `CLI (${hostname()})`;
 	const replaced = await revokeKeysByName({
 		appUrl,
 		sessionToken,
@@ -1230,6 +1232,15 @@ const PINNED_BUN_VERSION = "1.3.14";
 const BUN_RELEASE_BASE = process.env["SKYDIVE_BUN_RELEASE_BASE"] ?? "https://github.com/oven-sh/bun/releases/download";
 /** Guard env var: set on the child so a re-exec can never recurse. */
 const REEXEC_GUARD = "SKYDIVE_BUN_REEXEC";
+/**
+* Whether this process is the Bun child that `chat` re-exec'd itself into.
+* The parent Node process is still alive, blocked on spawnSync, and already
+* ran the per-invocation startup notices (update check, what's-new) — so the
+* child must not repeat them or the user sees each notice twice.
+*/
+function isBunReexecChild(env = process.env) {
+	return env[REEXEC_GUARD] === "1";
+}
 function isBun() {
 	return typeof process !== "undefined" && "bun" in process.versions;
 }
@@ -1459,9 +1470,9 @@ function ensureBunAndReexec(onProgress) {
 */
 function buildImportSeedPrompt(projectDir) {
 	return [
-		"I'm migrating from another coding agent — import my setup from this machine.",
+		"I'm migrating from another coding agent. Import my setup from this machine.",
 		"",
-		`Use your import-config skill. I ran this from \`${projectDir}\`, so start there (and my home directory) when you inventory what I have. Show me the plan first — what you'll bring over, where it lands in you, and anything you're leaving out (credentials especially) — and wait for my OK before committing anything.`
+		`Use your import-config skill. I ran this from \`${projectDir}\`, so start there (and my home directory) when you inventory what I have. Show me the plan first: what you'll bring over, where it lands in you, and anything you're leaving out (credentials especially). Then wait for my OK before committing anything.`
 	].join("\n");
 }
 const importCommand = {
@@ -1473,7 +1484,7 @@ const importCommand = {
 	}).option("print", {
 		alias: "p",
 		type: "string",
-		describe: "Non-interactive: send the import request as a one-shot, print the agent's plan, and exit (drivable from scripts or another coding agent). An optional value adds extra instructions to the request. The agent still waits for approval — continue the printed conversation with `skydive chat -p \"go ahead\" --resume <id> --share-machine`. Runs under Node."
+		describe: "Non-interactive: send the import request as a one-shot, print the agent's plan, and exit (drivable from scripts or another coding agent). An optional value adds extra instructions to the request. The agent still waits for approval; continue the printed conversation with `skydive chat -p \"go ahead\" --resume <id> --share-machine`. Runs under Node."
 	}).example("skydive import", "Import from the current directory").example("skydive import --agent kit", "Import into a specific agent, skipping the picker").example("skydive import -p --agent kit", "One-shot: print the agent's import plan and exit"),
 	handler: async (argv) => {
 		const appUrl = resolveAppUrl({ appUrl: argv["api-url"] });
@@ -1505,7 +1516,7 @@ const importCommand = {
 				process.exit(1);
 			}
 		}
-		const { runChat } = await import("./boot-on5ucI_Z.mjs");
+		const { runChat } = await import("./boot-DZYbTxev.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
@@ -1532,7 +1543,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 		printError(`${session.error.message} For non-interactive use, run \`skydive auth login --web\` first, or set SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { connectMachineShare } = await import("./print-share-D72CfWJk.mjs");
+	const { connectMachineShare } = await import("./print-share-CT4ltX7u.mjs");
 	const machineShare = await connectMachineShare({
 		appUrl,
 		sessionToken: session.value.sessionToken,
@@ -1540,7 +1551,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 	});
 	const extra = (argv.print ?? "").trim();
 	const prompt = buildImportSeedPrompt(process.cwd()) + (extra ? `\n\nAdditional instructions: ${extra}` : "");
-	const { runPrint } = await import("./print-BXNq9UxE.mjs");
+	const { runPrint } = await import("./print-ba_0hiV9.mjs");
 	try {
 		const result = await runPrint({
 			appUrl,
@@ -1622,7 +1633,7 @@ const createCommand = {
 		console.log(`  Name: ${key.name}`);
 		console.log(`  Key:  ${key.key}`);
 		console.log("");
-		console.log("  Save this key — it will not be shown again.");
+		console.log("  Save this key. It will not be shown again.");
 	}
 };
 const revokeCommand$1 = {
@@ -1695,7 +1706,7 @@ const setCommand$1 = {
 		describe: "Secret name (uppercase letters, digits, underscores)"
 	}).positional("value", {
 		type: "string",
-		describe: "Secret value. If omitted, read from stdin — keeps the value out of shell history."
+		describe: "Secret value. If omitted, read from stdin, which keeps the value out of shell history."
 	}),
 	handler: async (argv) => {
 		let value = argv.value;
@@ -1854,7 +1865,7 @@ const chatCommand = {
 	builder: (y) => y.option("print", {
 		alias: "p",
 		type: "string",
-		describe: "Non-interactive: send one prompt, print the reply, and exit (like `claude -p`). Reads the prompt from stdin if given no value. Runs under Node — no Bun required."
+		describe: "Non-interactive: send one prompt, print the reply, and exit (like `claude -p`). Reads the prompt from stdin if given no value. Runs under Node; no Bun required."
 	}).option("agent", {
 		type: "string",
 		describe: "Target agent, by id, slug, or name. With -p, the agent to send the one-shot prompt to. Without -p, pre-selects the agent and opens its conversation list, skipping the agent picker. Optional when the account has exactly one agent."
@@ -1917,7 +1928,7 @@ const chatCommand = {
 			sessionToken: auth.value.token,
 			agentSelector: argv.agent ?? null
 		});
-		const { runChat } = await import("./boot-on5ucI_Z.mjs");
+		const { runChat } = await import("./boot-DZYbTxev.mjs");
 		await runChat({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -1964,7 +1975,7 @@ async function ensureAgentWorkspace({ appUrl, sessionToken, agentSelector }) {
 	});
 	if (resolution.kind === "active") return;
 	if (resolution.kind === "switched") {
-		console.error(`Switched workspace to ${resolution.workspace.name} (${resolution.workspace.slug}) — ${resolution.agentName} lives there.`);
+		console.error(`Switched workspace to ${resolution.workspace.name} (${resolution.workspace.slug}). ${resolution.agentName} lives there.`);
 		return;
 	}
 	if (resolution.kind === "list-failed") {
@@ -1975,7 +1986,7 @@ async function ensureAgentWorkspace({ appUrl, sessionToken, agentSelector }) {
 		printError(`Agent found in workspace ${resolution.workspace.name}, but switching to it failed: ${resolution.message}. Run \`skydive workspace switch ${resolution.workspace.slug}\` and retry.`);
 		process.exit(1);
 	}
-	printError(`No agent with id ${agentSelector} in any workspace on this account. It may belong to a different account — run \`skydive auth login\` with the right one — or the agent may have been archived.`);
+	printError(`No agent with id ${agentSelector} in any workspace on this account. It may belong to a different account (run \`skydive auth login\` with the right one), or the agent may have been archived.`);
 	process.exit(1);
 }
 async function runPrintMode({ argv, appUrl }) {
@@ -1984,7 +1995,7 @@ async function runPrintMode({ argv, appUrl }) {
 		printError(`${auth.error.message} For non-interactive use, run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { runPrint, readStdin } = await import("./print-BXNq9UxE.mjs");
+	const { runPrint, readStdin } = await import("./print-ba_0hiV9.mjs");
 	await ensureAgentWorkspace({
 		appUrl,
 		sessionToken: auth.value.token,
@@ -2009,7 +2020,7 @@ async function runPrintMode({ argv, appUrl }) {
 			process.exit(1);
 		}
 	} else {
-		const { connectMachineShare } = await import("./print-share-D72CfWJk.mjs");
+		const { connectMachineShare } = await import("./print-share-CT4ltX7u.mjs");
 		machineShare = await connectMachineShare({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -2029,7 +2040,7 @@ async function runPrintMode({ argv, appUrl }) {
 		});
 		if (argv.json) output(argv, result);
 	} catch (error) {
-		const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-euid6MN9.mjs");
+		const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-Dgu5-oDy.mjs");
 		if (error instanceof BillingBlockedError) {
 			if (argv.json) output(argv, billingBlockedJsonResult(error, null));
 			printError(error.message);
@@ -2073,7 +2084,7 @@ const getCommand$1 = {
 			printError(`${auth.error.message} Run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 			process.exit(1);
 		}
-		const { messageGet } = await import("./print-BXNq9UxE.mjs");
+		const { messageGet } = await import("./print-ba_0hiV9.mjs");
 		try {
 			const result = await messageGet({
 				appUrl: auth.value.appUrl,
@@ -2083,7 +2094,7 @@ const getCommand$1 = {
 			});
 			if (argv.json) output(argv, result);
 		} catch (error) {
-			const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-euid6MN9.mjs");
+			const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-Dgu5-oDy.mjs");
 			if (error instanceof BillingBlockedError) {
 				if (argv.json) output(argv, billingBlockedJsonResult(error, argv["message-id"]));
 				printError(error.message);
@@ -2276,7 +2287,7 @@ const switchCommand = {
 				printError("The workspace picker needs the Bun runtime and it could not be set up automatically. Pass a workspace slug instead, or install Bun and retry.");
 				process.exit(1);
 			}
-			const { runWorkspacePicker } = await import("./boot-on5ucI_Z.mjs");
+			const { runWorkspacePicker } = await import("./boot-DZYbTxev.mjs");
 			await runWorkspacePicker(session);
 			return;
 		}
@@ -2354,19 +2365,18 @@ const openCommand = {
 		const agent = argv.agent ? resolveAgent((await fetchPortalDevices(session)).agents, argv.agent) : null;
 		const cwd = argv.cwd ? path.resolve(argv.cwd) : process.cwd();
 		const { machineName } = machineIdentity();
-		const { PortalClient } = await import("./client-D6apKmV0.mjs");
+		const { PortalDaemonClient } = await import("./daemon-client-DlblQIR9.mjs");
 		let lastLine = "";
 		let signalConnected;
 		const connected = new Promise((resolve) => {
 			signalConnected = resolve;
 		});
-		const client = new PortalClient({
+		const client = new PortalDaemonClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken,
-			resolveCwd: () => cwd,
 			onState: (state) => {
 				if (state.status === "connected") signalConnected();
-				const line = state.status === "error" ? `portal: connection error: ${state.error ?? "unknown"} — retrying` : `portal: ${state.status}`;
+				const line = state.status === "error" ? `portal: connection error: ${state.error ?? "unknown"}; retrying` : `portal: ${state.status}`;
 				if (line === lastLine) return;
 				lastLine = line;
 				if (state.status === "error") console.error(line);
@@ -2379,13 +2389,15 @@ const openCommand = {
 		};
 		process.on("SIGINT", stop);
 		process.on("SIGTERM", stop);
+		await client.start();
+		client.setFallbackCwd(cwd);
 		client.enable();
 		await connected;
 		if (agent) {
 			await client.grantAgent(agent.id);
 			console.log(`portal: granted ${agent.name} access to this machine (persists until revoked)`);
 		}
-		console.log(`portal: open — granted agents can run commands on ${machineName} as your user, cwd ${cwd}. ctrl+c to close.`);
+		console.log(`portal: open. granted agents can run commands on ${machineName} as your user, cwd ${cwd}. ctrl+c to close.`);
 		await new Promise(() => {});
 	}
 };
@@ -2411,7 +2423,7 @@ const grantCommand = {
 			});
 			return;
 		}
-		console.log(`Granted ${agent.name} access to ${device?.friendlyName ?? friendlyName}. The agent can run commands here whenever its portal is open — start with \`skydive portal open\`, or pass \`--share-machine\` on a \`chat -p\` run. Revoke with \`skydive portal revoke --agent ${agent.name}\`.`);
+		console.log(`Granted ${agent.name} access to ${device?.friendlyName ?? friendlyName}. The agent can run commands here whenever its portal is open. Start with \`skydive portal open\`, or pass \`--share-machine\` on a \`chat -p\` run. Revoke with \`skydive portal revoke --agent ${agent.name}\`.`);
 	}
 };
 const revokeCommand = {
@@ -2420,7 +2432,7 @@ const revokeCommand = {
 	builder: agentOption,
 	handler: async (argv) => {
 		const { session, agent, device } = await resolveGrantTarget(argv);
-		if (!device) throw new Error(`this machine (${machineIdentity().machineName}) isn't registered with the portal — there's nothing to revoke.`);
+		if (!device) throw new Error(`this machine (${machineIdentity().machineName}) isn't registered with the portal, so there's nothing to revoke.`);
 		await revokePortalAccess(session, {
 			deviceId: device.id,
 			agentId: agent.id
@@ -2589,7 +2601,7 @@ const portalCommand = {
 //#endregion
 //#region src/commands/sandbox.ts
 /** POSIX single-quote one word so the remote shell treats it as one token. */
-function shellQuote(word) {
+function shellQuote$1(word) {
 	if (/^[A-Za-z0-9_@%+=:,./-]+$/.test(word)) return word;
 	return `'${word.replace(/'/g, `'\\''`)}'`;
 }
@@ -2604,7 +2616,7 @@ function shellQuote(word) {
 * for too. yargs number-coerces bare numerals, so words are stringified.
 */
 function joinCommandWords(words) {
-	return words.map(String).map(shellQuote).join(" ").trim();
+	return words.map(String).map(shellQuote$1).join(" ").trim();
 }
 /**
 * `skydive sandbox` — the standalone counterpart to the chat TUI's `/sandbox`
@@ -2627,8 +2639,8 @@ const sandboxCommand = {
 	}).example("skydive sandbox --agent grace", "Live terminal (Ctrl-] detaches)").example("skydive sandbox --agent grace -- tail -n 50 /tmp/harness.log", "One-shot command (use `--` so its flags reach the sandbox)").example("skydive sandbox --agent grace -- sh -c 'ls /tmp | wc -l'", "Shell features go through an explicit `sh -c`"),
 	handler: async (argv) => {
 		const session = requireSession(argv);
-		const { createRestClient } = await import("./rest-Br2eFTlj.mjs");
-		const { resolveAgent } = await import("./print-BXNq9UxE.mjs");
+		const { createRestClient } = await import("./rest-DADJh0bi.mjs");
+		const { resolveAgent } = await import("./print-ba_0hiV9.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken
@@ -2697,7 +2709,7 @@ async function runPty({ session, agentId, agentName }) {
 		return 1;
 	}
 	console.error(`Connecting to ${agentName}'s sandbox… (Ctrl-] detaches)`);
-	const { runRawPtyPassthrough } = await import("./raw-pty-t5DC-e1T.mjs");
+	const { runRawPtyPassthrough } = await import("./raw-pty-3EkG-jjH.mjs");
 	const result = await runRawPtyPassthrough({
 		stdin: process.stdin,
 		stdout: process.stdout,
@@ -2709,6 +2721,275 @@ async function runPty({ session, agentId, agentName }) {
 	return result.code;
 }
 
+//#endregion
+//#region src/commands/fs.ts
+/**
+* POSIX-quote one word so the remote shell treats it as a single token. Wraps
+* `shell-quote`'s `quote` (already a repo dependency, used elsewhere in the
+* CLI) rather than hand-rolling the escaping — it is the well-tested source of
+* truth for making a path/arg with spaces, quotes, `$`, `;`, globs, etc. inert
+* when interpolated into an `sh -c` line.
+*/
+function shellQuote(word) {
+	return quote([word]);
+}
+const MISSING_FILE_EXIT = 44;
+/**
+* Build the remote shell command that base64-encodes a file to stdout. Exits
+* {@link MISSING_FILE_EXIT} when the path doesn't exist, 1 when it's a
+* directory, so the caller can tell "create new" from a genuine error.
+*/
+function buildReadCommand(path) {
+	const q = shellQuote(path);
+	return `sh -c ${shellQuote(`if [ ! -e ${q} ]; then exit ${MISSING_FILE_EXIT}; fi; if [ -d ${q} ]; then echo 'path is a directory' >&2; exit 1; fi; base64 < ${q}`)}`;
+}
+/**
+* Build the remote shell command that decodes `b64` and writes it to `path`
+* atomically (temp file + `mv`) so a dropped connection can't truncate the
+* original in place. `token` is a caller-supplied unique suffix for the temp
+* file — generated in JS (not the shell's `$$`, which shell-quote would escape
+* to a literal, so every write would collide on the same temp name).
+*/
+function buildWriteCommand(path, b64, token) {
+	const tmp = `${path}.skydive-edit.${token}`;
+	return `sh -c ${shellQuote(`printf %s ${shellQuote(b64)} | base64 -d > ${shellQuote(tmp)} && mv -f ${shellQuote(tmp)} ${shellQuote(path)}`)}`;
+}
+/**
+* Resolve the editor command from an explicit override, then $VISUAL, $EDITOR,
+* then `vi`. Split so `EDITOR="code --wait"` (command + flags) is honored.
+*/
+function resolveEditor(override, env) {
+	const parts = (override || env.VISUAL || env.EDITOR || "vi").split(/\s+/).filter(Boolean);
+	return {
+		bin: parts[0] ?? "vi",
+		args: parts.slice(1)
+	};
+}
+/**
+* `skydive fs edit <path>` — edit a file that lives on the agent's computer
+* (its sandbox) with your LOCAL editor. It reads the remote file down over the
+* same relay `skydive sandbox` uses, opens it in `$EDITOR`, and writes your
+* changes back when you save and close — so you edit a remote file as if it
+* were local, without opening the chat TUI.
+*
+* There is no server-side "file" endpoint yet: this rides entirely on the
+* existing one-shot `exec` mode of the sandbox stream. Contents move
+* base64-encoded in BOTH directions (exec has no stdin, so the write payload is
+* embedded in the command string) which keeps binary bytes, trailing newlines,
+* and CRLF intact. Access gating (EDIT on the agent + the sandbox kill switch)
+* is enforced by the relay, exactly as for `skydive sandbox`. A future PR adds
+* a first-class `fs` channel that `edit` (and `fs mount`) will ride instead.
+*/
+const fsEditCommand = {
+	command: "edit <path>",
+	describe: "Edit a file on the agent's computer (its sandbox) with your local $EDITOR",
+	builder: (y) => y.positional("path", {
+		type: "string",
+		demandOption: true,
+		describe: "Absolute or sandbox-relative path of the file to edit"
+	}).option("agent", {
+		type: "string",
+		describe: "Target agent, by id, slug, or name. Optional when the account has exactly one agent."
+	}).option("editor", {
+		type: "string",
+		describe: "Editor command to open (defaults to $VISUAL, then $EDITOR, then vi)"
+	}).example("skydive fs edit --agent grace /tmp/notes.md", "Edit a remote file").example("EDITOR=nano skydive fs edit /home/user/.self/soul.md", "Pick the editor via $EDITOR"),
+	handler: async (argv) => {
+		const session = requireSession(argv);
+		const remotePath = argv.path;
+		const { createRestClient } = await import("./rest-DADJh0bi.mjs");
+		const { resolveAgent } = await import("./print-ba_0hiV9.mjs");
+		const client = createRestClient({
+			appUrl: session.appUrl,
+			sessionToken: session.sessionToken
+		});
+		let agent;
+		try {
+			agent = resolveAgent(await client.listAgents({
+				scope: "org",
+				onPage: null
+			}), argv.agent ?? null);
+		} catch (error) {
+			printError(error instanceof Error ? error.message : String(error));
+			process.exit(1);
+		}
+		const opts = {
+			session,
+			agentId: agent.id
+		};
+		console.error(`Reading ${remotePath} from ${agent.name}'s sandbox…`);
+		const read = await readRemote({
+			...opts,
+			path: remotePath
+		});
+		if (read.kind === "error") {
+			printError(read.message);
+			process.exit(1);
+		}
+		const original = read.content;
+		if (read.kind === "missing") console.error(`${remotePath} does not exist yet — it will be created when you save.`);
+		const dir = await mkdtemp(join(tmpdir(), "skydive-edit-"));
+		const local = join(dir, remotePath.split("/").pop() || "file");
+		try {
+			await writeFile(local, original);
+			if (!await openEditor(argv.editor, local)) {
+				printError("Editor exited non-zero; not saving any changes.");
+				process.exit(1);
+			}
+			const edited = await readFile(local);
+			if (edited.equals(original)) {
+				console.error("No changes — nothing written.");
+				process.exit(0);
+			}
+			console.error(`Writing changes back to ${remotePath}…`);
+			const wrote = await writeRemote({
+				...opts,
+				path: remotePath,
+				content: edited
+			});
+			if (wrote.kind === "error") {
+				printError(`${wrote.message}\nYour edited copy is kept at ${local} so you don't lose it.`);
+				process.exit(1);
+			}
+			console.error("Saved.");
+			process.exit(0);
+		} finally {
+			await rm(dir, {
+				recursive: true,
+				force: true
+			}).catch((error) => {
+				console.error(`Note: could not remove temp dir ${dir}: ${error instanceof Error ? error.message : String(error)}`);
+			});
+		}
+	}
+};
+/**
+* Read a remote file as bytes. Runs `base64` on the file in the sandbox and
+* decodes the streamed stdout locally. Distinguishes "file is missing" (exit
+* code 44, so `edit` can create it) from a real read failure.
+*/
+function readRemote({ session, agentId, path }) {
+	const command = buildReadCommand(path);
+	const chunks = [];
+	const stderr = [];
+	return new Promise((resolve) => {
+		SandboxStream.open({
+			mode: "exec",
+			appUrl: session.appUrl,
+			sessionToken: session.sessionToken,
+			agentId,
+			command,
+			onEvent: (e) => {
+				switch (e.type) {
+					case "data":
+						chunks.push(Buffer.from(e.bytes));
+						break;
+					case "exit":
+						if (e.code === MISSING_FILE_EXIT) resolve({
+							kind: "missing",
+							content: Buffer.alloc(0)
+						});
+						else if (e.code === 0) resolve({
+							kind: "ok",
+							content: Buffer.from(Buffer.concat(chunks).toString("utf8").replace(/\s+/g, ""), "base64")
+						});
+						else resolve({
+							kind: "error",
+							message: stderr.join("").trim() || `Could not read the file (exit ${e.code}).`
+						});
+						break;
+					case "error":
+						stderr.push(e.message);
+						break;
+					case "close":
+						resolve({
+							kind: "error",
+							message: e.failure || "The connection to the sandbox closed before the file could be read."
+						});
+						break;
+				}
+			}
+		});
+	});
+}
+/**
+* Write bytes to a remote file. Exec has no stdin, so the base64 payload is
+* embedded in the command and decoded on the far side. Writes atomically via a
+* temp file + `mv` so a dropped connection mid-write can't leave a truncated
+* file in place of the original.
+*/
+function writeRemote({ session, agentId, path, content }) {
+	const token = randomBytes(6).toString("hex");
+	const command = buildWriteCommand(path, content.toString("base64"), token);
+	const stderr = [];
+	return new Promise((resolve) => {
+		SandboxStream.open({
+			mode: "exec",
+			appUrl: session.appUrl,
+			sessionToken: session.sessionToken,
+			agentId,
+			command,
+			onEvent: (e) => {
+				switch (e.type) {
+					case "data":
+						stderr.push(Buffer.from(e.bytes).toString("utf8"));
+						break;
+					case "exit":
+						resolve(e.code === 0 ? { kind: "ok" } : {
+							kind: "error",
+							message: stderr.join("").trim() || `Could not write the file (exit ${e.code}).`
+						});
+						break;
+					case "error":
+						stderr.push(e.message);
+						break;
+					case "close":
+						resolve({
+							kind: "error",
+							message: e.failure || "The connection to the sandbox closed before the file was written."
+						});
+						break;
+				}
+			}
+		});
+	});
+}
+/**
+* Open `file` in the caller's editor and resolve to whether it exited cleanly.
+* Precedence: explicit `--editor`, then $VISUAL, $EDITOR, then `vi`. The editor
+* inherits the real TTY so full-screen editors (vim/nano) work.
+*/
+function openEditor(override, file) {
+	const { bin, args: editorArgs } = resolveEditor(override, process.env);
+	const args = [...editorArgs, file];
+	return new Promise((resolve) => {
+		const child = spawn(bin, args, { stdio: "inherit" });
+		child.on("error", (err) => {
+			printError(`Could not launch editor "${bin}": ${err.message}`);
+			resolve(false);
+		});
+		child.on("exit", (code) => resolve(code === 0));
+	});
+}
+/**
+* `skydive fs` — work with the files on an agent's computer (its sandbox) from
+* your own machine. The namespace for filesystem access:
+*
+*   - `fs edit <path>`  edit one remote file with your local editor (shipped).
+*   - `fs mount <dir>`  mount the whole sandbox filesystem locally (coming in a
+*                       later PR, on a first-class `fs` relay channel).
+*
+* Grouping these under one command keeps the file surface discoverable and
+* leaves room to grow (`fs ls`, `fs cat`, `fs pull`) without adding more
+* top-level commands.
+*/
+const fsCommand = {
+	command: "fs <command>",
+	describe: "Work with the files on an agent's computer (its sandbox)",
+	builder: (y) => y.command(fsEditCommand).demandCommand(1, "Specify a subcommand: edit"),
+	handler: () => {}
+};
+
 //#endregion
 //#region src/update-check/manifest.ts
 /**
@@ -2937,7 +3218,7 @@ async function downloadAndVerify(opts) {
 	const bytes = new Uint8Array(await response.arrayBuffer());
 	if (bytes.byteLength === 0) throw new UpdateError(`download from ${url} was empty`);
 	const actual = sha256Hex(bytes);
-	if (actual !== opts.expectedSha256) throw new UpdateError(`sha256 mismatch (expected ${opts.expectedSha256}, got ${actual}) — the download may be corrupt; re-run \`skydive update\``);
+	if (actual !== opts.expectedSha256) throw new UpdateError(`sha256 mismatch (expected ${opts.expectedSha256}, got ${actual}). the download may be corrupt; re-run \`skydive update\``);
 	return bytes;
 }
 /**
@@ -3312,7 +3593,7 @@ const updateCommand = {
 				});
 				return;
 			}
-			throw new UpdateError(source === "binary" ? `couldn't reach the ${channel} release channel — check your connection and try again.` : `couldn't reach the npm registry to look up the ${channel} release — check your connection and try again.`);
+			throw new UpdateError(source === "binary" ? `couldn't reach the ${channel} release channel; check your connection and try again.` : `couldn't reach the npm registry to look up the ${channel} release; check your connection and try again.`);
 		}
 		const plan = planUpdate({
 			currentVersion,
@@ -3367,7 +3648,7 @@ const updateCommand = {
 			return;
 		}
 		const selfPath = resolveSelfPath();
-		if (!selfPath) throw new UpdateError("couldn't determine this binary's path to replace it — reinstall with the install script instead.");
+		if (!selfPath) throw new UpdateError("couldn't determine this binary's path to replace it; reinstall with the install script instead.");
 		console.log(describePlan(plan, channel, false));
 		await applyBinary(selfPath, await downloadAndVerify({
 			downloadBaseUrl: RELEASE_CDN_URL,
@@ -3517,7 +3798,7 @@ const configCommand = {
 //#endregion
 //#region src/cli.ts
 function createCli(argv) {
-	return yargs(argv).scriptName("skydive").usage("$0 <command> [options]").parserConfiguration({ "populate--": true }).example("skydive auth login", "Store your API key").example("skydive chat", "Open the interactive chat TUI (prod)").example("skydive chat --api-url http://localhost:4500", "Chat against a local dev API").example("skydive agents list", "List your agents").example("skydive completion install", "Set up TAB completion for your shell").example("skydive keys create \"my-key\"", "Create an API key").example("skydive secrets set OPENAI_API_KEY --agent-id <id>", "Set a secret (value from stdin)").example("skydive workspace list", "List workspaces on your account").example("skydive config set updateCheck false", "Disable the daily update check").example("skydive workspace switch acme-team", "Switch the workspace all `skydive` commands act on").example("skydive portal open --agent grace", "Open the portal to this machine for an agent, headless (no TUI)").option("json", {
+	return yargs(argv).scriptName("skydive").usage("$0 <command> [options]").parserConfiguration({ "populate--": true }).example("skydive auth login", "Store your API key").example("skydive chat", "Open the interactive chat TUI (prod)").example("skydive chat --api-url http://localhost:4500", "Chat against a local dev API").example("skydive agents list", "List your agents").example("skydive completion install", "Set up TAB completion for your shell").example("skydive keys create \"my-key\"", "Create an API key").example("skydive secrets set OPENAI_API_KEY --agent-id <id>", "Set a secret (value from stdin)").example("skydive workspace list", "List workspaces on your account").example("skydive config set updateCheck false", "Disable the daily update check").example("skydive workspace switch acme-team", "Switch the workspace all `skydive` commands act on").example("skydive portal open --agent grace", "Open the portal to this machine for an agent, headless (no TUI)").example("skydive fs edit --agent grace /tmp/notes.md", "Edit a file on the agent's computer with your local editor").option("json", {
 		type: "boolean",
 		default: false,
 		global: true,
@@ -3531,7 +3812,7 @@ function createCli(argv) {
 		type: "string",
 		global: true,
 		describe: "Override API base URL"
-	}).command(authCommand).command(chatCommand).command(messagesCommand).command(conversationsCommand).command(agentsCommand).command(importCommand).command(keysCommand).command(secretsCommand).command(workspaceCommand).command(portalCommand).command(sandboxCommand).command(updateCommand).command(configCommand).command(completionCommand).demandCommand(1, "Specify a command. Run --help for usage.").strict().wrap(null).version(version).alias("v", "version").alias("h", "help").help().fail((msg, err) => {
+	}).command(authCommand).command(chatCommand).command(messagesCommand).command(conversationsCommand).command(agentsCommand).command(importCommand).command(keysCommand).command(secretsCommand).command(workspaceCommand).command(portalCommand).command(sandboxCommand).command(fsCommand).command(updateCommand).command(configCommand).command(completionCommand).demandCommand(1, "Specify a command. Run --help for usage.").strict().wrap(null).version(version).alias("v", "version").alias("h", "help").help().fail((msg, err) => {
 		printError(err ? err instanceof Error ? err.message : String(err) : msg ?? "Unknown error");
 		process.exit(1);
 	});
@@ -3744,7 +4025,7 @@ function setupUpdateCheck(argv) {
 
 //#endregion
 //#region src/changelog.generated.ts
-const CHANGELOG_MD = "# Changelog\n\nAll notable changes to the Skydive CLI are documented here.\n\nThe format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),\nand this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n\n## [Unreleased]\n\n## [0.4.0] - 2026-08-07\n\n### Added\n\n- `skydive chat` works with API key auth: an API key alone now opens the chat TUI (and headless `chat -p`) without a browser login, using the key's pinned workspace.\n- `skydive config` command to view and set the safe, hand-editable CLI preferences (`shareMachineDefault`, `updateCheck`) without opening `config.json`. `config`/`config list` shows each key, its effective value, and whether it comes from the file or the built-in default; `config get`/`set`/`unset` read and change one key; `config path` prints the config file location. It only ever touches those preference keys, never credentials or flow-managed state.\n- Billing-blocked sends and runs now surface the server-authored recovery\n  guidance from the typed billing outcome. The chat TUI renders it as a\n  warning-toned system-notice row — live when a send is refused or a run is\n  stopped at the billing boundary, and again when reopening a conversation\n  that holds a persisted billing notice — instead of a generic error.\n  Headless `chat -p` and `messages get` print the guidance (state, recovery\n  step, and manage-billing URL) on stderr, keep any partial output already\n  streamed on stdout, and exit with code `5` (distinct from the generic `1`)\n  so scripted callers can tell a billing pause from a failure.\n- Syntax highlighting for 14 more languages in the chat transcript and file/review panes (python, bash, go, rust, c, cpp, java, ruby, css, html, json, yaml, and more) — previously only JavaScript/TypeScript rendered colored.\n\n### Changed\n\n- `skydive agent list` lists the full agent roster by default instead of a truncated page.\n\n### Fixed\n\n- Long multi-line bash tool-call commands (e.g. heredocs) are clamped with a `+N more · click to expand` tail instead of dumping their whole body into the scrollback.\n- Tool error output is clipped the same way as ok output, so a failing command no longer floods the transcript.\n- The TUI toast overlay has an opaque background instead of letting the transcript bleed through.\n\n## [0.3.0] - 2026-08-04\n\n### Added\n\n**Chat TUI**\n\n- `/fork` slash command to fork a conversation at any point and continue in a new thread.\n- `/conversation` switches threads from inside a live session.\n- `/compact` triggers manual conversation compaction.\n- `/portal` and `/copy` slash commands.\n- Archive the current conversation from the chat TUI.\n- `--new` flag on `skydive chat` to start a fresh conversation.\n- Debounced server-side conversation search in the picker, with title matches ranked first.\n- File review pane orientation toggle, and review comments in the file pane.\n- Pinned plan card controls and a jump-to-latest hint.\n- Terminal title (OSC) follows the live conversation title on every screen; inside cmux the workspace is renamed too, and linked PRs are pushed to the cmux sidebar.\n- Every participating agent shows in the conversation list; connect cards each have their own identity, and ctrl+r asks which connect card to act on.\n- Colored Skydive splash art in `skydive --help` and the TUI pickers.\n- New-agent name prefilled from the server's suggestion.\n\n**CLI & platform**\n\n- `skydive update` self-updater, with an update notice when a new version is available.\n- Shell completions for bash, zsh, and fish via `completion install`.\n- Portal daemon: one connection per host with per-conversation working directories.\n- Agent-led coding-agent import (`skydive import`).\n- Per-workspace scoping on the REST client, and cross-org `--agent <uuid>` auto-switches workspace.\n- `skydive-beta` wrapper for the canary channel.\n\n### Fixed\n\n- `skydive update` no longer claims an update is available on every npm install.\n- Chat memory is bounded (payload clamps + windowed rows) with a memory watchdog and OOM diagnostic report; transcript rows are memoized so streaming stops re-rendering the whole chat.\n- Chat-send failures map to real error messages.\n- Notification and sidebar previews use the last text block of the reply and strip inline markdown.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n- Sending to non-web channel conversations is blocked in the TUI.\n- GitHub bot connect opens on the web front door, not api.skydive.com.\n- TUI activity counter times from the run, not the screen.\n\n## [0.2.0] - 2026-07-29\n\n### Added\n\n**Sandbox & machine access**\n\n- Standalone `skydive sandbox` command for direct access to an agent's sandbox.\n- `/sandbox` in the chat TUI — live PTY session and one-shot command execution.\n- Headless machine sharing via `skydive portal`, with self-registering portal grants.\n- `shareMachineDefault` config key for always-on portal sharing.\n\n**Chat TUI**\n\n- File pane (`ctrl+g`) with Changes and Files tabs: a shared file tree plus source viewer and a workspace browser, mouse-resizable and responsive to terminal size.\n- Agent todo list rendered in the chat TUI, above the composer, mirroring the web chat's todo card.\n- Fuzzy finder in the conversation and agent pickers.\n- Slash-command autocomplete menu.\n- Paste or drag-and-drop any file into the composer; paste clipboard images with Cmd+V.\n- Run local shell commands with `!` in the composer.\n- Conversation recaps, streamed live title updates, and per-agent attribution on assistant turns.\n- Working timer rolls up into minutes and hours.\n- Conversation picker paginates past 50 conversations and shows only your own conversations.\n- Esc leaves a live run; typing `exit` quits the chat.\n- Cursor Dark theme.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n\n**Headless & scripting**\n\n- Resume a conversation by id.\n- `conversations list` and `conversations show` for transcript reads.\n- `messages get`, with run recovery keyed on message id.\n- Connect cards surface in headless `-p` mode so a driving agent never gets stuck.\n\n**Authentication**\n\n- `skydive auth login` via the browser now auto-mints an API key, so one login yields both a chat session and a usable management credential. Management commands announce the key's pinned workspace when it drives them, so a workspace mismatch is visible at use time.\n- Workspace picker on the device authorization page.\n- Account and workspace identity shown in `auth status`.\n\n**Platform**\n\n- Standalone binary builds compiling the CLI into a per-target executable.\n- Interactive workspace switcher; management commands follow the active workspace.\n- Terminal host integrations and agent notifications.\n\n### Fixed\n\n- Transcript errors collapse to one line, click to expand (REST and portal errors keep their full body).\n- Dragged/pasted image file paths attach the file instead of inserting path text, including macOS paths with literal parentheses.\n- Bare URLs in chat markdown are hyperlinked so they survive text wrap.\n- Composer draft is preserved across TUI overlays.\n- Relative connect links resolve before opening the browser.\n- Numbered markdown headings render colored in the TUI.\n- Chat transcript pages by 75% of a screen; picker rows stay on one line.\n- Run starts push to the TUI over the conversation stream.\n- Security: remediated high-severity dependency findings and cleared tar/shell-quote CVEs.\n\n## [0.1.0] - 2026-07-21\n\nInitial public release: `skydive chat` TUI, agent and conversation management,\ndevice authorization, and headless `-p` mode.\n";
+const CHANGELOG_MD = "# Changelog\n\nAll notable changes to the Skydive CLI are documented here.\n\nThe format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),\nand this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n\n## [Unreleased]\n\n### Added\n\n- `skydive fs` — a namespace for working with the files on an agent's computer (its sandbox) from your own machine. Its first subcommand, `skydive fs edit <path>`, reads a remote file down over the same relay `skydive sandbox` uses, opens it in your local editor (`$VISUAL`/`$EDITOR`, override with `--editor`, defaults to `vi`), and writes your changes back atomically when you save and close — so you can edit a remote file as if it were local without opening the chat TUI. A path that doesn't exist yet is created on save; no changes means nothing is written. Access is gated on EDIT permission for the agent, exactly like `skydive sandbox`. (A first-class `fs` relay channel and `skydive fs mount` land in follow-ups.)\n\n## [0.4.0] - 2026-08-07\n\n### Added\n\n- `skydive chat` works with API key auth: an API key alone now opens the chat TUI (and headless `chat -p`) without a browser login, using the key's pinned workspace.\n- `skydive config` command to view and set the safe, hand-editable CLI preferences (`shareMachineDefault`, `updateCheck`) without opening `config.json`. `config`/`config list` shows each key, its effective value, and whether it comes from the file or the built-in default; `config get`/`set`/`unset` read and change one key; `config path` prints the config file location. It only ever touches those preference keys, never credentials or flow-managed state.\n- Billing-blocked sends and runs now surface the server-authored recovery\n  guidance from the typed billing outcome. The chat TUI renders it as a\n  warning-toned system-notice row — live when a send is refused or a run is\n  stopped at the billing boundary, and again when reopening a conversation\n  that holds a persisted billing notice — instead of a generic error.\n  Headless `chat -p` and `messages get` print the guidance (state, recovery\n  step, and manage-billing URL) on stderr, keep any partial output already\n  streamed on stdout, and exit with code `5` (distinct from the generic `1`)\n  so scripted callers can tell a billing pause from a failure.\n- Syntax highlighting for 14 more languages in the chat transcript and file/review panes (python, bash, go, rust, c, cpp, java, ruby, css, html, json, yaml, and more) — previously only JavaScript/TypeScript rendered colored.\n\n### Changed\n\n- `skydive agent list` lists the full agent roster by default instead of a truncated page.\n\n### Fixed\n\n- Long multi-line bash tool-call commands (e.g. heredocs) are clamped with a `+N more · click to expand` tail instead of dumping their whole body into the scrollback.\n- Tool error output is clipped the same way as ok output, so a failing command no longer floods the transcript.\n- The TUI toast overlay has an opaque background instead of letting the transcript bleed through.\n\n## [0.3.0] - 2026-08-04\n\n### Added\n\n**Chat TUI**\n\n- `/fork` slash command to fork a conversation at any point and continue in a new thread.\n- `/conversation` switches threads from inside a live session.\n- `/compact` triggers manual conversation compaction.\n- `/portal` and `/copy` slash commands.\n- Archive the current conversation from the chat TUI.\n- `--new` flag on `skydive chat` to start a fresh conversation.\n- Debounced server-side conversation search in the picker, with title matches ranked first.\n- File review pane orientation toggle, and review comments in the file pane.\n- Pinned plan card controls and a jump-to-latest hint.\n- Terminal title (OSC) follows the live conversation title on every screen; inside cmux the workspace is renamed too, and linked PRs are pushed to the cmux sidebar.\n- Every participating agent shows in the conversation list; connect cards each have their own identity, and ctrl+r asks which connect card to act on.\n- Colored Skydive splash art in `skydive --help` and the TUI pickers.\n- New-agent name prefilled from the server's suggestion.\n\n**CLI & platform**\n\n- `skydive update` self-updater, with an update notice when a new version is available.\n- Shell completions for bash, zsh, and fish via `completion install`.\n- Portal daemon: one connection per host with per-conversation working directories.\n- Agent-led coding-agent import (`skydive import`).\n- Per-workspace scoping on the REST client, and cross-org `--agent <uuid>` auto-switches workspace.\n- `skydive-beta` wrapper for the canary channel.\n\n### Fixed\n\n- `skydive update` no longer claims an update is available on every npm install.\n- Chat memory is bounded (payload clamps + windowed rows) with a memory watchdog and OOM diagnostic report; transcript rows are memoized so streaming stops re-rendering the whole chat.\n- Chat-send failures map to real error messages.\n- Notification and sidebar previews use the last text block of the reply and strip inline markdown.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n- Sending to non-web channel conversations is blocked in the TUI.\n- GitHub bot connect opens on the web front door, not api.skydive.com.\n- TUI activity counter times from the run, not the screen.\n\n## [0.2.0] - 2026-07-29\n\n### Added\n\n**Sandbox & machine access**\n\n- Standalone `skydive sandbox` command for direct access to an agent's sandbox.\n- `/sandbox` in the chat TUI — live PTY session and one-shot command execution.\n- Headless machine sharing via `skydive portal`, with self-registering portal grants.\n- `shareMachineDefault` config key for always-on portal sharing.\n\n**Chat TUI**\n\n- File pane (`ctrl+g`) with Changes and Files tabs: a shared file tree plus source viewer and a workspace browser, mouse-resizable and responsive to terminal size.\n- Agent todo list rendered in the chat TUI, above the composer, mirroring the web chat's todo card.\n- Fuzzy finder in the conversation and agent pickers.\n- Slash-command autocomplete menu.\n- Paste or drag-and-drop any file into the composer; paste clipboard images with Cmd+V.\n- Run local shell commands with `!` in the composer.\n- Conversation recaps, streamed live title updates, and per-agent attribution on assistant turns.\n- Working timer rolls up into minutes and hours.\n- Conversation picker paginates past 50 conversations and shows only your own conversations.\n- Esc leaves a live run; typing `exit` quits the chat.\n- Cursor Dark theme.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n\n**Headless & scripting**\n\n- Resume a conversation by id.\n- `conversations list` and `conversations show` for transcript reads.\n- `messages get`, with run recovery keyed on message id.\n- Connect cards surface in headless `-p` mode so a driving agent never gets stuck.\n\n**Authentication**\n\n- `skydive auth login` via the browser now auto-mints an API key, so one login yields both a chat session and a usable management credential. Management commands announce the key's pinned workspace when it drives them, so a workspace mismatch is visible at use time.\n- Workspace picker on the device authorization page.\n- Account and workspace identity shown in `auth status`.\n\n**Platform**\n\n- Standalone binary builds compiling the CLI into a per-target executable.\n- Interactive workspace switcher; management commands follow the active workspace.\n- Terminal host integrations and agent notifications.\n\n### Fixed\n\n- Transcript errors collapse to one line, click to expand (REST and portal errors keep their full body).\n- Dragged/pasted image file paths attach the file instead of inserting path text, including macOS paths with literal parentheses.\n- Bare URLs in chat markdown are hyperlinked so they survive text wrap.\n- Composer draft is preserved across TUI overlays.\n- Relative connect links resolve before opening the browser.\n- Numbered markdown headings render colored in the TUI.\n- Chat transcript pages by 75% of a screen; picker rows stay on one line.\n- Run starts push to the TUI over the conversation stream.\n- Security: remediated high-severity dependency findings and cleared tar/shell-quote CVEs.\n\n## [0.1.0] - 2026-07-21\n\nInitial public release: `skydive chat` TUI, agent and conversation management,\ndevice authorization, and headless `-p` mode.\n";
 
 //#endregion
 //#region src/whats-new.ts
@@ -3881,17 +4162,18 @@ function maybePrintWhatsNew({ stderrIsTTY = process.stderr.isTTY ?? false, nonIn
 //#endregion
 //#region src/bin.ts
 installCrashHandler();
+maybeStartProfiling(hideBin(process.argv), version);
 if (process.argv.includes(UPDATE_WORKER_FLAG)) {
 	await runUpdateCheckWorker();
 	process.exit(0);
 }
 if (process.argv.includes(PORTAL_DAEMON_FLAG)) {
-	const { runPortalDaemon } = await import("./daemon-BADmpJAs.mjs");
+	const { runPortalDaemon } = await import("./daemon-imLBqTGg.mjs");
 	runPortalDaemon(process.argv);
 } else runCli();
 function runCli() {
 	const completionProbe = isCompletionProbe(process.argv);
-	if (!completionProbe) {
+	if (!completionProbe && !isBunReexecChild()) {
 		maybePrintWhatsNew();
 		setupUpdateCheck(hideBin(process.argv));
 	}