skydive-cli 0.5.0-beta.22 → 0.5.0-beta.24

package/dist/js/bin.mjs

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
-import { A as setActiveWorkspace, D as getActiveWorkspaceId, E as ensureActiveOrganization, M as version, O as getSessionIdentity, S as themes, T as machineOsFromPlatform, a as installCrashHandler, j as name, k as listWorkspaces, t as maybeStartProfiling, u as brandHelpArt, w as buildImportSeedPrompt } from "./profiler-zp3MKUcM.mjs";
-import { A as getStoredApiKeyId, B as saveConfig, C as getDefaultAgent, E as getPromptHistoryPath, F as resolveChatAuth, I as resolveConfig, L as resolveManagementAuth, M as getUpdateCheckDisabled, P as resolveAppUrl, R as resolveSession, S as getConfigPath, T as getPreference, U as setLastSeenVersion, V as saveSession, _ as API_KEY_PREFIX, b as PREFERENCES, g as API_KEY_FAMILY_PREFIX, h as API_KEYS_URL, i as resolveAgent, j as getStoredApiKeyWorkspaceName, k as getShareMachineDefault, v as DEFAULT_API_URL, w as getLastSeenVersion, x as deleteConfig } from "./print-OvYyj6Uk.mjs";
+import { A as takenAliasNames, B as name, D as dedupeAliasName, E as aliasActivationHint, F as getActiveWorkspaceId, I as getSessionIdentity, L as listWorkspaces, M as defaultInstallEnv, N as detectShell, O as installAgentAlias, P as ensureActiveOrganization, R as resolveWorkspaceId, S as themes, T as machineOsFromPlatform, V as version, a as installCrashHandler, j as SUPPORTED_SHELLS, k as slugifyAliasName, t as maybeStartProfiling, u as brandHelpArt, w as buildImportSeedPrompt, z as setActiveWorkspace } from "./profiler-DxmQ_Xqv.mjs";
+import { A as getStoredApiKeyId, B as saveConfig, C as getDefaultAgent, E as getPromptHistoryPath, F as resolveChatAuth, I as resolveConfig, L as resolveManagementAuth, M as getUpdateCheckDisabled, P as resolveAppUrl, R as resolveSession, S as getConfigPath, T as getPreference, U as setLastSeenVersion, V as saveSession, _ as API_KEY_PREFIX, b as PREFERENCES, g as API_KEY_FAMILY_PREFIX, h as API_KEYS_URL, i as resolveAgent$1, j as getStoredApiKeyWorkspaceName, k as getShareMachineDefault, v as DEFAULT_API_URL, w as getLastSeenVersion, x as deleteConfig } from "./print-DQtIEVHh.mjs";
 import { n as printError, r as printTable, t as output } from "./output-DYzzdXYV.mjs";
 import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
 import { t as createRestClient } from "./rest-Dx6b-Nq_.mjs";
 import "./billing-blocked-2wju4gC_.mjs";
 import { r as resolveMachineIdentity } from "./client-DbqRBquD.mjs";
-import { i as queryDaemonStatus, l as PORTAL_DAEMON_FLAG, n as ensureDaemonRunning, s as stopDaemon, u as daemonPaths } from "./daemon-Dnv9p14X.mjs";
+import { i as queryDaemonStatus, l as PORTAL_DAEMON_FLAG, n as ensureDaemonRunning, s as stopDaemon, u as daemonPaths } from "./daemon-BBeAB5SM.mjs";
 import { i as grantPortalAccess, n as fetchPortalDevices, o as registerPortalDevice, r as findThisDevice, s as revokePortalAccess } from "./api-DG5W6iwx.mjs";
 import { t as SandboxStream } from "./client-c4c5MmgN.mjs";
 import { hideBin } from "yargs/helpers";
 import yargs from "yargs";
-import os, { hostname, tmpdir } from "node:os";
+import { hostname, tmpdir } from "node:os";
 import path, { join } from "node:path";
 import { err, ok } from "neverthrow";
 import { z } from "zod";
@@ -70,10 +70,12 @@ var SkydiveApiClient = class {
 	baseUrl;
 	token;
 	authKind;
+	workspaceId;
 	constructor(config) {
 		this.baseUrl = `${config.apiUrl.replace(/\/$/, "")}/v1`;
 		this.token = config.token;
 		this.authKind = config.kind;
+		this.workspaceId = config.workspaceId;
 	}
 	/**
 	* List one page of agents in the caller's workspace. The server caps a
@@ -159,6 +161,7 @@ var SkydiveApiClient = class {
 			authorization: `Bearer ${this.token}`,
 			"user-agent": USER_AGENT
 		};
+		if (this.workspaceId) headers["x-workspace-id"] = this.workspaceId;
 		if (params.body) headers["content-type"] = "application/json";
 		let response;
 		try {
@@ -718,11 +721,6 @@ const authCommand = {
 * matches on it to keep notices off the user's prompt (see isCompletionProbe).
 */
 const COMPLETION_PROBE_FLAG = "--get-yargs-completions";
-const SUPPORTED_SHELLS = [
-	"bash",
-	"zsh",
-	"fish"
-];
 /**
 * True when this invocation is a shell asking for completion candidates
 * rather than a user running a command. Such a run must print candidates and
@@ -894,24 +892,6 @@ complete -c ${name} -f -k -a '(${fn})'
 ${blockEnd(name)}
 `;
 }
-const defaultInstallEnv = () => ({
-	home: os.homedir(),
-	platform: process.platform,
-	env: process.env,
-	exists: fs.existsSync
-});
-/**
-* The shell to install for when the user didn't name one. `$SHELL` is the
-* only signal available: a completion install runs as a child process, so the
-* invoking shell's own variables (`$ZSH_VERSION`, `$FISH_VERSION`) aren't
-* visible here.
-*/
-function detectShell(env = process.env) {
-	const shell = env["SHELL"];
-	if (!shell) return null;
-	const name = path.basename(shell);
-	return SUPPORTED_SHELLS.find((candidate) => name === candidate) ?? null;
-}
 function completionTarget(shell, deps = defaultInstallEnv()) {
 	const { home, platform, env, exists } = deps;
 	if (shell === "fish") {
@@ -1032,7 +1012,7 @@ function requireSession(argv) {
 * {@link resolveManagementAuth}) or exit with a friendly hint, then build the
 * `/v1` client. Shared by `agents`, `keys` and `secrets`.
 */
-function requireManagementClient(argv) {
+function requireManagementClient(argv, opts = {}) {
 	const auth = resolveManagementAuth({ apiUrl: argv["api-url"] });
 	if (auth.isErr()) {
 		printError(auth.error.message);
@@ -1040,7 +1020,10 @@ function requireManagementClient(argv) {
 	}
 	if (auth.value.kind === "api-key" && auth.value.pinnedWorkspaceName) process.stderr.write(`Using this machine's API key, which always acts in the "${auth.value.pinnedWorkspaceName}" workspace (even after \`workspace switch\`). Run \`skydive auth login\` to change that.
 `);
-	return new SkydiveApiClient(auth.value);
+	return new SkydiveApiClient({
+		...auth.value,
+		...opts.workspaceId ? { workspaceId: opts.workspaceId } : {}
+	});
 }
 /** Resolve the session (see {@link requireSession}) and build a REST client. */
 function requireRestClient(argv) {
@@ -1057,6 +1040,31 @@ function requireRestClient(argv) {
 
 //#endregion
 //#region src/commands/agents.ts
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/**
+* Resolve an agent from an id or a name. A uuid selector hits `GET
+* /agents/:id` directly; anything else is matched case-insensitively against
+* the roster's names. Ambiguity is an error rather than a silent pick, so an
+* alias never lands on the wrong agent.
+*/
+async function resolveAgent(client, selector) {
+	if (UUID_RE.test(selector)) {
+		const result = await client.getAgent(selector);
+		if (result.isErr()) throw new Error(result.error.message);
+		return result.value;
+	}
+	const list = await client.listAgents({
+		scope: "org",
+		limit: 100
+	});
+	if (list.isErr()) throw new Error(list.error.message);
+	const needle = selector.trim().toLowerCase();
+	const matches = list.value.agents.filter((a) => a.name.toLowerCase() === needle);
+	const [first] = matches;
+	if (matches.length === 1 && first) return first;
+	if (matches.length === 0) throw new Error(`No agent named "${selector}". Pass an id, or run \`skydive agents list\`.`);
+	throw new Error(`Multiple agents named "${selector}". Pass the id instead:\n${matches.map((a) => `  ${a.name}  ${a.id}`).join("\n")}`);
+}
 const listCommand$5 = {
 	command: "list",
 	describe: "List agents in the active workspace",
@@ -1206,10 +1214,82 @@ const createCommand$1 = {
 		if (agent.url) console.log(`  API:  ${agent.url}`);
 	}
 };
+/**
+* Resolve the `--workspace` selector (slug/name/id) to a workspace, using the
+* chat/session credential (workspace listing is a session endpoint). Exits
+* with a clear message on a bad selector or when listing isn't available
+* (e.g. a pinned API key). Returns null when the flag is absent.
+*/
+async function resolveAliasWorkspace(argv) {
+	if (!argv.workspace) return null;
+	const auth = resolveChatAuth({ appUrl: resolveAppUrl({ appUrl: argv["api-url"] }) });
+	if (auth.isErr()) {
+		printError(`${auth.error.message} Run \`skydive auth login\` to resolve a workspace by name.`);
+		process.exit(1);
+	}
+	const resolved = await resolveWorkspaceId({
+		appUrl: auth.value.appUrl,
+		sessionToken: auth.value.token,
+		selector: argv.workspace
+	});
+	if (resolved.isErr()) {
+		printError(resolved.error.message);
+		process.exit(1);
+	}
+	return resolved.value;
+}
+const aliasCommand = {
+	command: "alias <agent> [name]",
+	describe: "Add a shell alias that opens an agent's chat",
+	builder: (y) => y.positional("agent", {
+		type: "string",
+		demandOption: true,
+		describe: "Agent id or name to alias"
+	}).positional("name", {
+		type: "string",
+		describe: "Alias to use (default: derived from the agent name)"
+	}).option("shell", {
+		type: "string",
+		choices: SUPPORTED_SHELLS,
+		describe: "Shell to install for (default: $SHELL)"
+	}).option("workspace", {
+		type: "string",
+		describe: "Workspace the agent lives in (slug, name, or id). Scopes the lookup to it and pins it in the alias, so the alias opens the right agent even when it isn't your active workspace."
+	}).example("skydive agents alias Ripple", "alias `ripple` -> that agent").example("skydive agents alias Ripple rip", "use a custom alias token").example("skydive agents alias Ripple --workspace acme", "pin the workspace in the alias"),
+	handler: async (argv) => {
+		const shell = argv.shell ? SUPPORTED_SHELLS.find((s) => s === argv.shell) : detectShell();
+		if (!shell) throw new Error(argv.shell ? `Unsupported shell "${argv.shell}". Supported: ${SUPPORTED_SHELLS.join(", ")}.` : `Could not tell which shell to use from $SHELL. Name one with --shell (${SUPPORTED_SHELLS.join(", ")}).`);
+		const workspace = await resolveAliasWorkspace(argv);
+		const agent = await resolveAgent(requireManagementClient(argv, { workspaceId: workspace?.id }), argv.agent);
+		const preferred = argv.name ? slugifyAliasName(argv.name) : slugifyAliasName(agent.name);
+		const alias = dedupeAliasName(preferred, takenAliasNames(shell));
+		const result = installAgentAlias({
+			alias,
+			agentId: agent.id,
+			shell,
+			...workspace ? { workspaceId: workspace.id } : {}
+		}, void 0);
+		if (argv.json) {
+			output(argv, {
+				...result,
+				workspace: workspace ?? null
+			});
+			return;
+		}
+		if (argv.quiet) {
+			console.log(result.alias);
+			return;
+		}
+		const where = workspace ? ` (workspace ${workspace.name})` : "";
+		console.log(`${result.updated ? "Updated" : "Added"} alias \`${result.alias}\` -> ${agent.name}${where} in ${result.path}`);
+		if (alias !== preferred) console.log(`(\`${preferred}\` was taken, so used \`${alias}\`.)`);
+		console.log(aliasActivationHint(result));
+	}
+};
 const agentsCommand = {
 	command: "agents",
 	describe: "Manage agents",
-	builder: (y) => y.command(listCommand$5).command(getCommand$2).command(createCommand$1).demandCommand(1, "Specify a subcommand: list, get, create"),
+	builder: (y) => y.command(listCommand$5).command(getCommand$2).command(createCommand$1).command(aliasCommand).demandCommand(1, "Specify a subcommand: list, get, create, alias"),
 	handler: () => {}
 };
 
@@ -1504,10 +1584,11 @@ const importCommand = {
 				process.exit(1);
 			}
 		}
-		const { runChat } = await import("./boot-DdYXpKMY.mjs");
+		const { runChat } = await import("./boot-BPzsuEQF.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
+			workspaceId: void 0,
 			shareMachine: true,
 			promptHistoryPath: getPromptHistoryPath(),
 			notifications: true,
@@ -1541,7 +1622,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 	});
 	const extra = (argv.print ?? "").trim();
 	const prompt = buildImportSeedPrompt(process.cwd(), machineOsFromPlatform(process.platform)) + (extra ? `\n\nAdditional instructions: ${extra}` : "");
-	const { runPrint } = await import("./print-C8DHKrJu.mjs");
+	const { runPrint } = await import("./print-Pi0PQRj8.mjs");
 	try {
 		const result = await runPrint({
 			appUrl,
@@ -1849,6 +1930,24 @@ async function resolveAgentWorkspace({ appUrl, sessionToken, agentSelector }) {
 
 //#endregion
 //#region src/commands/chat.ts
+/**
+* Resolve the `--workspace` selector to an id, or undefined when the flag is
+* absent. A bad selector is fatal — a chat scoped to the wrong (or a
+* nonexistent) workspace is worse than failing fast with how to list them.
+*/
+async function resolveWorkspaceFlag({ appUrl, sessionToken, selector }) {
+	if (!selector) return void 0;
+	const resolved = await resolveWorkspaceId({
+		appUrl,
+		sessionToken,
+		selector
+	});
+	if (resolved.isErr()) {
+		printError(resolved.error.message);
+		process.exit(1);
+	}
+	return resolved.value.id;
+}
 const chatCommand = {
 	command: "chat",
 	describe: "Open the interactive chat TUI, or -p for a one-shot",
@@ -1859,6 +1958,9 @@ const chatCommand = {
 	}).option("agent", {
 		type: "string",
 		describe: "Target agent, by id, slug, or name. With -p, the agent to send the one-shot prompt to. Without -p, pre-selects the agent and opens its conversation list, skipping the agent picker. Optional when the account has exactly one agent."
+	}).option("workspace", {
+		type: "string",
+		describe: "Scope this chat to a workspace, by slug, name, or id. Every request for this invocation is scoped to it (no persistent switch of your active workspace), so a slug/name --agent resolves inside it and the roster is that workspace. Useful in an alias for an agent that lives in a workspace other than your active one."
 	}).option("conversation", {
 		alias: "resume",
 		type: "string",
@@ -1912,21 +2014,27 @@ const chatCommand = {
 				process.exit(1);
 			}
 		}
+		const workspaceId = await resolveWorkspaceFlag({
+			appUrl,
+			sessionToken: auth.value.token,
+			selector: argv.workspace
+		});
 		const themeId = argv.theme ?? process.env["SKYDIVE_THEME"] ?? void 0;
 		if (themeId !== void 0 && !themes.some((t) => t.id === themeId)) {
 			printError(`Unknown theme "${themeId}". Valid themes: ${themes.map((t) => t.id).join(", ")}`);
 			process.exit(1);
 		}
-		await ensureAgentWorkspace({
+		if (!workspaceId) await ensureAgentWorkspace({
 			appUrl,
 			sessionToken: auth.value.token,
 			agentSelector: argv.agent ?? null
 		});
-		const { runChat } = await import("./boot-DdYXpKMY.mjs");
+		const { runChat } = await import("./boot-BPzsuEQF.mjs");
 		await runChat({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
 			authKind: auth.value.kind,
+			workspaceId,
 			shareMachine: resolveShareMachine(argv),
 			promptHistoryPath: getPromptHistoryPath(),
 			theme: themeId,
@@ -2005,8 +2113,13 @@ async function runPrintMode({ argv, appUrl }) {
 		printError(`${auth.error.message} For non-interactive use, run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { runPrint, readStdin } = await import("./print-C8DHKrJu.mjs");
-	await ensureAgentWorkspace({
+	const { runPrint, readStdin } = await import("./print-Pi0PQRj8.mjs");
+	const workspaceId = await resolveWorkspaceFlag({
+		appUrl,
+		sessionToken: auth.value.token,
+		selector: argv.workspace
+	});
+	if (!workspaceId) await ensureAgentWorkspace({
 		appUrl,
 		sessionToken: auth.value.token,
 		agentSelector: argv.agent ?? null
@@ -2041,6 +2154,7 @@ async function runPrintMode({ argv, appUrl }) {
 		const result = await runPrint({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
+			workspaceId,
 			prompt,
 			agentSelector: argv.agent ?? null,
 			conversationId: argv.conversation ?? null,
@@ -2094,7 +2208,7 @@ const getCommand$1 = {
 			printError(`${auth.error.message} Run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 			process.exit(1);
 		}
-		const { messageGet } = await import("./print-C8DHKrJu.mjs");
+		const { messageGet } = await import("./print-Pi0PQRj8.mjs");
 		try {
 			const result = await messageGet({
 				appUrl: auth.value.appUrl,
@@ -2153,7 +2267,7 @@ const listCommand$2 = {
 	}),
 	handler: async (argv) => {
 		const client = requireRestClient(argv);
-		const agent = resolveAgent(await client.listAgents({
+		const agent = resolveAgent$1(await client.listAgents({
 			scope: "org",
 			onPage: null
 		}), argv.agent ?? null);
@@ -2297,7 +2411,7 @@ const switchCommand = {
 				printError("The workspace picker needs the Bun runtime and it could not be set up automatically. Pass a workspace slug instead, or install Bun and retry.");
 				process.exit(1);
 			}
-			const { runWorkspacePicker } = await import("./boot-DdYXpKMY.mjs");
+			const { runWorkspacePicker } = await import("./boot-BPzsuEQF.mjs");
 			await runWorkspacePicker(session);
 			return;
 		}
@@ -2349,7 +2463,7 @@ async function resolveGrantTarget(argv) {
 	const [{ devices, agents }, identity] = await Promise.all([fetchPortalDevices(session), resolveMachineIdentity(null)]);
 	return {
 		session,
-		agent: resolveAgent(agents, argv.agent),
+		agent: resolveAgent$1(agents, argv.agent),
 		device: findThisDevice(devices, identity.machineName),
 		identity
 	};
@@ -2373,10 +2487,10 @@ const openCommand = {
 	}),
 	handler: async (argv) => {
 		const session = requireSession(argv);
-		const agent = argv.agent ? resolveAgent((await fetchPortalDevices(session)).agents, argv.agent) : null;
+		const agent = argv.agent ? resolveAgent$1((await fetchPortalDevices(session)).agents, argv.agent) : null;
 		const cwd = argv.cwd ? path.resolve(argv.cwd) : process.cwd();
 		const { machineName } = await resolveMachineIdentity(null);
-		const { PortalDaemonClient } = await import("./daemon-client-JDBIWms7.mjs");
+		const { PortalDaemonClient } = await import("./daemon-client-DXXLCfAg.mjs");
 		let lastLine = "";
 		let signalConnected;
 		const connected = new Promise((resolve) => {
@@ -2619,7 +2733,7 @@ const forwardCommand = {
 	}),
 	handler: async (argv) => {
 		const session = requireSession(argv);
-		const agent = resolveAgent((await fetchPortalDevices(session)).agents, argv.agent ?? null);
+		const agent = resolveAgent$1((await fetchPortalDevices(session)).agents, argv.agent ?? null);
 		const targetPort = argv.port;
 		const localPort = argv["local-port"] ?? targetPort;
 		const { startForward } = await import("./forward-18QoL5dO.mjs");
@@ -2687,7 +2801,7 @@ const sandboxCommand = {
 	handler: async (argv) => {
 		const session = requireSession(argv);
 		const { createRestClient } = await import("./rest-DW05dMMc.mjs");
-		const { resolveAgent } = await import("./print-C8DHKrJu.mjs");
+		const { resolveAgent } = await import("./print-Pi0PQRj8.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken
@@ -2845,7 +2959,7 @@ const fsEditCommand = {
 		const session = requireSession(argv);
 		const remotePath = argv.path;
 		const { createRestClient } = await import("./rest-DW05dMMc.mjs");
-		const { resolveAgent } = await import("./print-C8DHKrJu.mjs");
+		const { resolveAgent } = await import("./print-Pi0PQRj8.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken
@@ -4222,7 +4336,7 @@ if (process.argv.includes(UPDATE_WORKER_FLAG)) {
 	process.exit(0);
 }
 if (process.argv.includes(PORTAL_DAEMON_FLAG)) {
-	const { runPortalDaemon } = await import("./daemon-CzhmKp_H.mjs");
+	const { runPortalDaemon } = await import("./daemon-BM8EJU8-.mjs");
 	runPortalDaemon(process.argv);
 } else runCli();
 function runCli() {

package/dist/js/{boot-DdYXpKMY.mjs → boot-BPzsuEQF.mjs}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
-import { A as setActiveWorkspace, C as themesForMode, D as getActiveWorkspaceId, T as machineOsFromPlatform, _ as theme, a as installCrashHandler, b as themeModeFromColorFgBg, c as MARK_CELLS, d as splashFitsWidth, f as DEFAULT_THEME_ID, g as noColorRequested, h as monoTheme, i as writeArtifact, k as listWorkspaces, l as WORDMARK, m as findTheme, n as profilingEnabled, o as buildCrashReport, p as applyTheme, r as record, s as writeCrashReport, v as themeForMode, x as themeVersion, y as themeMode } from "./profiler-zp3MKUcM.mjs";
-import { D as getReviewStateDir, H as saveTheme, N as recordDefaultAgent, O as getSavedTheme, S as getConfigPath, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, i as resolveAgent, l as parseExternalOauthConnectParams, m as specKeyFor, p as parseConnectCard, s as MASK_CHAR, u as parseOauthConnectParams, v as DEFAULT_API_URL, y as DEFAULT_APP_URL, z as resolveWebUrl } from "./print-OvYyj6Uk.mjs";
+import { A as takenAliasNames, C as themesForMode, D as dedupeAliasName, E as aliasActivationHint, F as getActiveWorkspaceId, L as listWorkspaces, N as detectShell, O as installAgentAlias, T as machineOsFromPlatform, _ as theme, a as installCrashHandler, b as themeModeFromColorFgBg, c as MARK_CELLS, d as splashFitsWidth, f as DEFAULT_THEME_ID, g as noColorRequested, h as monoTheme, i as writeArtifact, k as slugifyAliasName, l as WORDMARK, m as findTheme, n as profilingEnabled, o as buildCrashReport, p as applyTheme, r as record, s as writeCrashReport, v as themeForMode, x as themeVersion, y as themeMode, z as setActiveWorkspace } from "./profiler-DxmQ_Xqv.mjs";
+import { D as getReviewStateDir, H as saveTheme, N as recordDefaultAgent, O as getSavedTheme, S as getConfigPath, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, i as resolveAgent, l as parseExternalOauthConnectParams, m as specKeyFor, p as parseConnectCard, s as MASK_CHAR, u as parseOauthConnectParams, v as DEFAULT_API_URL, y as DEFAULT_APP_URL, z as resolveWebUrl } from "./print-DQtIEVHh.mjs";
 import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
 import { a as isRecord, i as errorMessage, n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-Dx6b-Nq_.mjs";
 import { i as billingBlockedOutcomeFromSendResponse } from "./billing-blocked-2wju4gC_.mjs";
 import { t as PortalClient } from "./client-DbqRBquD.mjs";
-import "./daemon-Dnv9p14X.mjs";
+import "./daemon-BBeAB5SM.mjs";
 import "./api-DG5W6iwx.mjs";
 import { t as SandboxStream } from "./client-c4c5MmgN.mjs";
-import { t as PortalDaemonClient } from "./daemon-client-Bb-6i20B.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-CJrRjvat.mjs";
 import { t as runRawPtyPassthrough } from "./raw-pty-DY4KelZW.mjs";
 import * as os$1 from "node:os";
 import { homedir, platform, release, tmpdir } from "node:os";
@@ -2141,7 +2141,54 @@ function AgentCreateScreen() {
 			cancelled = true;
 		};
 	}, [rest]);
+	const openChat = (agent) => {
+		goTo({
+			kind: "chat",
+			agent,
+			conversation: {
+				kind: "new",
+				agentId: agent.id,
+				nonce: crypto.randomUUID()
+			}
+		});
+	};
+	const acceptAlias = (agent, alias) => {
+		try {
+			const shell = detectShell();
+			if (!shell) {
+				openChat(agent);
+				return;
+			}
+			const result = installAgentAlias({
+				alias,
+				agentId: agent.id,
+				shell
+			});
+			setState({
+				kind: "aliased",
+				agent,
+				message: `Added \`${result.alias}\`. ${aliasActivationHint(result)}`
+			});
+		} catch {
+			openChat(agent);
+		}
+	};
 	useKeyboard((key) => {
+		if (state.kind === "offer-alias") {
+			if (key.name === "y") {
+				acceptAlias(state.agent, state.alias);
+				return;
+			}
+			if (key.name === "n" || key.name === "escape" || key.name === "return") {
+				openChat(state.agent);
+				return;
+			}
+			return;
+		}
+		if (state.kind === "aliased") {
+			openChat(state.agent);
+			return;
+		}
 		if (key.name === "escape" && state.kind !== "creating") goTo({ kind: "agent-picker" });
 	});
 	const createAgent = async () => {
@@ -2157,15 +2204,13 @@ function AgentCreateScreen() {
 		setState({ kind: "creating" });
 		try {
 			const agent = await rest.createAgent({ name: result.name });
-			goTo({
-				kind: "chat",
+			const shell = detectShell();
+			if (shell) setState({
+				kind: "offer-alias",
 				agent,
-				conversation: {
-					kind: "new",
-					agentId: agent.id,
-					nonce: crypto.randomUUID()
-				}
+				alias: dedupeAliasName(slugifyAliasName(agent.name), takenAliasNames(shell))
 			});
+			else openChat(agent);
 		} catch (err) {
 			if (err instanceof HttpError && err.status === 401) {
 				fail("Session expired. Run `skydive auth login --web`, then retry.");
@@ -2205,6 +2250,11 @@ function AgentCreateScreen() {
 			});
 		}
 	};
+	if (state.kind === "offer-alias") return /* @__PURE__ */ jsx(AliasOffer, {
+		agentName: state.agent.name,
+		alias: state.alias
+	});
+	if (state.kind === "aliased") return /* @__PURE__ */ jsx(AliasResult, { message: state.message });
 	return /* @__PURE__ */ jsxs("box", {
 		style: {
 			flexDirection: "column",
@@ -2257,6 +2307,58 @@ function AgentCreateScreen() {
 		]
 	});
 }
+/**
+* The post-create prompt offering to alias the agent's name to a shell
+* command. Presentational so the frame gallery can render it directly.
+*/
+function AliasOffer({ agentName, alias }) {
+	return /* @__PURE__ */ jsxs("box", {
+		style: {
+			flexDirection: "column",
+			flexGrow: 1,
+			gap: 1
+		},
+		children: [
+			/* @__PURE__ */ jsxs("text", {
+				fg: theme.fg,
+				children: [
+					"Created ",
+					agentName,
+					"."
+				]
+			}),
+			/* @__PURE__ */ jsxs("text", {
+				fg: theme.muted,
+				children: [
+					"Add a shell alias so you can run `",
+					alias,
+					"` to open this agent?"
+				]
+			}),
+			/* @__PURE__ */ jsx("text", {
+				fg: theme.dim,
+				children: "y add alias · n skip"
+			})
+		]
+	});
+}
+/** The confirmation shown after an alias is written. */
+function AliasResult({ message }) {
+	return /* @__PURE__ */ jsxs("box", {
+		style: {
+			flexDirection: "column",
+			flexGrow: 1,
+			gap: 1
+		},
+		children: [/* @__PURE__ */ jsx("text", {
+			fg: theme.fg,
+			children: message
+		}), /* @__PURE__ */ jsx("text", {
+			fg: theme.dim,
+			children: "press any key to continue"
+		})]
+	});
+}
 
 //#endregion
 //#region src/chat/tui/screens/first-run.tsx
@@ -5009,6 +5111,14 @@ function shouldPollComputer(opts) {
 * The command run in the sandbox to collect the snapshot. `sh`-portable, reads
 * only `/proc` and `df`. Each metric is one `key<TAB>value` line so the parser
 * never has to positionally align anything.
+*
+* The `port` lines enumerate LISTEN sockets the sandbox user's own processes
+* hold: one awk pass maps socket inodes from /proc/net/tcp{,6} to pids via
+* /proc/<pid>/fd, then a shell loop attaches each pid's cmdline. Platform
+* daemons run as root, so their /proc/<pid>/fd is unreadable here and they
+* never emit a line — the "user's servers only" filter falls out of
+* permissions rather than a curated list. Hex address:port is left for the
+* parser to decode (strtonum is gawk-only).
 */
 const SANDBOX_STATS_COMMAND = [
 	`printf '${SANDBOX_STATS_SENTINEL}\\n'`,
@@ -5018,9 +5128,97 @@ const SANDBOX_STATS_COMMAND = [
 	`awk '/^MemTotal:/{t=$2}/^MemAvailable:/{a=$2}END{printf "mem_total_kb\\t%d\\nmem_avail_kb\\t%d\\n",t,a}' /proc/meminfo`,
 	`awk '/^SwapTotal:/{t=$2}/^SwapFree:/{f=$2}END{printf "swap_total_kb\\t%d\\nswap_free_kb\\t%d\\n",t,f}' /proc/meminfo`,
 	`df -Pk / | awk 'NR==2{printf "disk_total_kb\\t%d\\ndisk_used_kb\\t%d\\n",$2,$3}'`,
-	`printf 'procs\\t%s\\n' "$(ls -1 /proc 2>/dev/null | grep -c '^[0-9]\\+$')"`
+	`printf 'procs\\t%s\\n' "$(ls -1 /proc 2>/dev/null | grep -c '^[0-9]\\+$')"`,
+	`ls -l /proc/[0-9]*/fd 2>/dev/null | awk 'BEGIN { while ((getline l < "/proc/net/tcp") > 0) { split(l,f," "); if (f[4]=="0A") want[f[10]]=f[2] } close("/proc/net/tcp"); while ((getline l < "/proc/net/tcp6") > 0) { split(l,f," "); if (f[4]=="0A") want[f[10]]=f[2] } close("/proc/net/tcp6") } $0 ~ "^/proc/[0-9]+/fd:$" { pid=substr($0,7,length($0)-10) } match($0, /socket:\\[[0-9]+\\]/) { ino=substr($0,RSTART+8,RLENGTH-9); if (ino in want && !(ino in done)) { done[ino]=1; print want[ino] "\\t" pid } }' | while read addr pid; do cl=$(head -c 200 "/proc/$pid/cmdline" 2>/dev/null | tr "\\0" " "); printf 'port\\t%s\\t%s\\t%s\\n' "$addr" "$pid" "$cl"; done`
 ].join(" ; ");
 const KB = 1024;
+const HIDDEN_PORTS = new Set([
+	38994,
+	49983,
+	38996
+]);
+const V6_LOOPBACK_HEX = "00000000000000000000000001000000";
+/**
+* Whether a /proc/net/tcp{,6} local-address hex field is a loopback bind.
+* v4 words are little-endian, so 127.0.0.1 is `0100007F` — the first octet
+* (127) is the LAST byte pair. Covers v4-mapped v6 (`::ffff:127.x.y.z`) via
+* the same tail check.
+*/
+function isLoopbackHex(addrHex) {
+	const hex = addrHex.toUpperCase();
+	if (hex.length === 8) return hex.slice(6) === "7F";
+	if (hex.length === 32) {
+		if (hex === V6_LOOPBACK_HEX) return true;
+		return hex.startsWith("0000000000000000FFFF0000") && hex.slice(30) === "7F";
+	}
+	return false;
+}
+const RUNTIME_NAMES = new Set([
+	"node",
+	"bun",
+	"deno",
+	"python",
+	"python3",
+	"sh",
+	"bash"
+]);
+const FLAGS_WITH_VALUE = new Set([
+	"--require",
+	"-r",
+	"--import",
+	"--loader",
+	"--experimental-loader"
+]);
+/**
+* A short display name from a raw cmdline: basename of argv[0], plus — when
+* argv[0] is a bare runtime — the basename of the first non-flag argument with
+* its extension dropped (`node …/vite/bin/vite.js` → `node vite`).
+*/
+function processDisplayName(cmdline) {
+	const argv = cmdline.trim().split(/\s+/).filter(Boolean);
+	const first = argv[0];
+	if (first === void 0) return null;
+	const base = (p) => p.split("/").pop() ?? p;
+	const name = base(first);
+	if (!RUNTIME_NAMES.has(name)) return name;
+	let script;
+	for (let i = 1; i < argv.length; i += 1) {
+		const arg = argv[i];
+		if (arg === void 0) break;
+		if (FLAGS_WITH_VALUE.has(arg)) {
+			i += 1;
+			continue;
+		}
+		if (arg.startsWith("-")) continue;
+		script = arg;
+		break;
+	}
+	if (!script) return name;
+	return `${name} ${base(script).replace(/\.(?:mjs|cjs|js|ts|tsx|py)$/, "")}`;
+}
+/**
+* Fold the collector's `port` lines (one per listen socket) into one entry
+* per port: v4/v6 binds of the same server dedupe, `loopbackOnly` only when
+* every bind is loopback, and the hidden platform ports drop out.
+*/
+function parsePortLines(lines) {
+	const byPort = /* @__PURE__ */ new Map();
+	for (const line of lines) {
+		const port = Number.parseInt(line.portHex, 16);
+		if (!Number.isFinite(port) || port <= 0 || HIDDEN_PORTS.has(port)) continue;
+		const entry = byPort.get(port);
+		if (entry) entry.loopback.push(isLoopbackHex(line.addrHex));
+		else byPort.set(port, {
+			loopback: [isLoopbackHex(line.addrHex)],
+			cmdline: line.cmdline
+		});
+	}
+	return [...byPort.entries()].map(([port, entry]) => ({
+		port,
+		loopbackOnly: entry.loopback.every(Boolean),
+		process: entry.cmdline ? processDisplayName(entry.cmdline) : null
+	})).sort((a, b) => a.port - b.port);
+}
 /**
 * Parse the collector's output into `SandboxStats`, or return null when the
 * block is absent or malformed (so the caller can show the raw output as an
@@ -5032,10 +5230,22 @@ function parseSandboxStats(raw) {
 	const start = raw.indexOf(SANDBOX_STATS_SENTINEL);
 	if (start === -1) return null;
 	const fields = /* @__PURE__ */ new Map();
+	const portLines = [];
 	for (const line of raw.slice(start).split("\n")) {
 		const tab = line.indexOf("	");
 		if (tab === -1) continue;
-		fields.set(line.slice(0, tab).trim(), line.slice(tab + 1).trim());
+		const key = line.slice(0, tab).trim();
+		if (key === "port") {
+			const parts = line.split("	");
+			const [addrHex = "", portHex = ""] = (parts[1] ?? "").split(":");
+			if (addrHex && portHex) portLines.push({
+				addrHex,
+				portHex,
+				cmdline: parts.slice(3).join(" ").trim()
+			});
+			continue;
+		}
+		fields.set(key, line.slice(tab + 1).trim());
 	}
 	const num = (key) => {
 		const v = fields.get(key);
@@ -5067,7 +5277,8 @@ function parseSandboxStats(raw) {
 		swapFreeBytes: (num("swap_free_kb") ?? 0) * KB,
 		diskTotalBytes: diskTotal * KB,
 		diskUsedBytes: diskUsed * KB,
-		procs: Math.round(procs)
+		procs: Math.round(procs),
+		ports: parsePortLines(portLines)
 	};
 }
 function severityFor(fraction) {
@@ -5160,6 +5371,22 @@ function renderBar(fraction, width) {
 	const filled = "█".repeat(Math.min(full, cells)) + partial;
 	return (filled + "░".repeat(Math.max(0, cells - filled.length))).slice(0, cells);
 }
+/** How many port rows the card draws before folding the rest into `+N more`. */
+const MAX_PORT_ROWS = 8;
+const WELL_KNOWN_PORTS = new Map([[3e3, "agent harness"], [3001, "agent webserver"]]);
+/**
+* Reduce the snapshot's ports to drawable rows. The well-known note wins over
+* `local only` — a loopback-bound 3001 being unreachable is a distinct problem
+* the gauges' error path already surfaces, and one annotation per row keeps
+* the table scannable.
+*/
+function toPortRows(ports) {
+	return ports.map((p) => ({
+		port: p.port,
+		process: p.process ?? "?",
+		note: WELL_KNOWN_PORTS.get(p.port) ?? (p.loopbackOnly ? "local only" : null)
+	}));
+}
 
 //#endregion
 //#region src/chat/tui/chunks/computer.tsx
@@ -5224,26 +5451,34 @@ function ComputerItem({ item }) {
 		children: ["couldn't read sandbox stats", error ? `: ${error}` : ""]
 	}) });
 	const gauges = toGauges(stats);
-	const labelWidth = Math.max(...gauges.map((g) => g.label.length));
+	const portRows = toPortRows(stats.ports);
+	const labelWidth = Math.max(5, ...gauges.map((g) => g.label.length));
 	const barWidth = 24;
-	return /* @__PURE__ */ jsxs(Shell, { children: [gauges.map((g) => /* @__PURE__ */ jsx(GaugeRow, {
-		gauge: g,
-		labelWidth,
-		barWidth
-	}, g.label)), /* @__PURE__ */ jsxs("text", {
-		fg: theme.dim,
-		children: [
-			`${"uptime".padEnd(labelWidth)}  `,
-			/* @__PURE__ */ jsx("span", {
-				fg: theme.muted,
-				children: formatUptime(stats.uptimeSeconds)
-			}),
-			/* @__PURE__ */ jsx("span", {
-				fg: theme.dim,
-				children: `  ·  ${stats.procs} processes`
-			})
-		]
-	})] });
+	return /* @__PURE__ */ jsxs(Shell, { children: [
+		gauges.map((g) => /* @__PURE__ */ jsx(GaugeRow, {
+			gauge: g,
+			labelWidth,
+			barWidth
+		}, g.label)),
+		/* @__PURE__ */ jsx(PortsSection, {
+			rows: portRows,
+			labelWidth
+		}),
+		/* @__PURE__ */ jsxs("text", {
+			fg: theme.dim,
+			children: [
+				`${"uptime".padEnd(labelWidth)}  `,
+				/* @__PURE__ */ jsx("span", {
+					fg: theme.muted,
+					children: formatUptime(stats.uptimeSeconds)
+				}),
+				/* @__PURE__ */ jsx("span", {
+					fg: theme.dim,
+					children: `  ·  ${stats.procs} processes`
+				})
+			]
+		})
+	] });
 }
 /** The card frame: a bold `computer` title over the graph rows. */
 function Shell({ children }) {
@@ -5291,6 +5526,42 @@ function GaugeRow({ gauge, labelWidth, barWidth }) {
 		})
 	] });
 }
+/**
+* The listening-ports table: one row per port the sandbox user's processes
+* hold, first row carrying the `ports` gutter label to line up with the
+* gauges. Folds past MAX_PORT_ROWS into a `+N more` line so a busy box can't
+* flood the transcript.
+*/
+function PortsSection({ rows, labelWidth }) {
+	if (rows.length === 0) return null;
+	const shown = rows.slice(0, MAX_PORT_ROWS);
+	const folded = rows.length - shown.length;
+	const gutter = " ".repeat(labelWidth);
+	return /* @__PURE__ */ jsxs(Fragment, { children: [shown.map((row, i) => /* @__PURE__ */ jsxs("text", { children: [
+		/* @__PURE__ */ jsx("span", {
+			fg: theme.muted,
+			children: `${i === 0 ? "ports".padEnd(labelWidth) : gutter}  `
+		}),
+		/* @__PURE__ */ jsx("span", {
+			fg: theme.fg,
+			children: String(row.port).padStart(5)
+		}),
+		/* @__PURE__ */ jsx("span", {
+			fg: theme.muted,
+			children: `  ${row.process}`
+		}),
+		row.note ? /* @__PURE__ */ jsx("span", {
+			fg: theme.dim,
+			children: `  · ${row.note}`
+		}) : null
+	] }, row.port)), folded > 0 ? /* @__PURE__ */ jsxs("text", { children: [/* @__PURE__ */ jsx("span", {
+		fg: theme.muted,
+		children: `${gutter}  `
+	}), /* @__PURE__ */ jsx("span", {
+		fg: theme.dim,
+		children: `+${folded} more`
+	})] }) : null] });
+}
 
 //#endregion
 //#region src/chat/tui/chunks/index.tsx
@@ -13337,7 +13608,7 @@ function ToastView() {
 
 //#endregion
 //#region src/chat/tui/app.tsx
-function App({ appUrl, sessionToken, authKind, shareMachine, promptHistoryPath, notifications, agentSelector, conversationId, newConversation, defaultAgentSelector, forceOnboarding }) {
+function App({ appUrl, sessionToken, authKind, workspaceId, shareMachine, promptHistoryPath, notifications, agentSelector, conversationId, newConversation, defaultAgentSelector, forceOnboarding }) {
 	const renderer = useRenderer();
 	const screen = useStore((s) => s.screen);
 	useEffect(() => {
@@ -13410,7 +13681,8 @@ function App({ appUrl, sessionToken, authKind, shareMachine, promptHistoryPath,
 	useEffect(() => {
 		const rest = createRestClient({
 			appUrl,
-			sessionToken
+			sessionToken,
+			workspaceId
 		});
 		setClients({
 			appUrl,
@@ -13446,6 +13718,7 @@ function App({ appUrl, sessionToken, authKind, shareMachine, promptHistoryPath,
 	}, [
 		appUrl,
 		sessionToken,
+		workspaceId,
 		promptHistoryPath,
 		agentSelector,
 		conversationId,
@@ -14031,7 +14304,7 @@ function onRenderCommit(id, phase, actualDuration, baseDuration, startTime, comm
 * module — and the heavy OpenTUI dependency graph it pulls in — is
 * dynamically imported and never loaded on the Node management path.
 */
-async function runChat({ appUrl, sessionToken, authKind = "session", shareMachine, promptHistoryPath, theme: themeOverride, notifications, agentSelector, conversationId, newConversation, defaultAgentSelector, forceOnboarding, seedPrompt }) {
+async function runChat({ appUrl, sessionToken, authKind = "session", workspaceId, shareMachine, promptHistoryPath, theme: themeOverride, notifications, agentSelector, conversationId, newConversation, defaultAgentSelector, forceOnboarding, seedPrompt }) {
 	await registerGrammars();
 	const watchdog = startMemoryWatchdog();
 	installCrashHandler({ memoryProvider: () => watchdog.snapshot() });
@@ -14068,6 +14341,7 @@ async function runChat({ appUrl, sessionToken, authKind = "session", shareMachin
 			appUrl,
 			sessionToken,
 			authKind,
+			workspaceId,
 			shareMachine,
 			promptHistoryPath,
 			notifications,

package/dist/js/{daemon-Dnv9p14X.mjs → daemon-BBeAB5SM.mjs}

@@ -20,7 +20,7 @@ import { access, appendFile, mkdir, readFile, unlink, writeFile } from "node:fs/
 * the commit time of the built tree is one monotonic clock they share.
 */
 function portalDaemonBuild() {
-	return "1786692209";
+	return "1786727732";
 }
 /**
 * Whether a client carrying `mine` should replace a running daemon carrying

package/dist/js/{daemon-CzhmKp_H.mjs → daemon-BM8EJU8-.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import "./client-DbqRBquD.mjs";
-import { a as runPortalDaemon, i as queryDaemonStatus, n as ensureDaemonRunning, o as startPortalDaemon, r as isDaemonListening, s as stopDaemon, t as PortalDaemon } from "./daemon-Dnv9p14X.mjs";
+import { a as runPortalDaemon, i as queryDaemonStatus, n as ensureDaemonRunning, o as startPortalDaemon, r as isDaemonListening, s as stopDaemon, t as PortalDaemon } from "./daemon-BBeAB5SM.mjs";
 import "./api-DG5W6iwx.mjs";
 
 export { runPortalDaemon };

package/dist/js/{daemon-client-Bb-6i20B.mjs → daemon-client-CJrRjvat.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { c as LOCAL_PROTOCOL_VERSION, d as encodeLine, f as makeLineParser, n as ensureDaemonRunning, p as parseDaemonMessage, u as daemonPaths } from "./daemon-Dnv9p14X.mjs";
+import { c as LOCAL_PROTOCOL_VERSION, d as encodeLine, f as makeLineParser, n as ensureDaemonRunning, p as parseDaemonMessage, u as daemonPaths } from "./daemon-BBeAB5SM.mjs";
 import { randomUUID } from "node:crypto";
 import { connect } from "node:net";
 

package/dist/js/daemon-client-DXXLCfAg.mjs

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import "./client-DbqRBquD.mjs";
+import "./daemon-BBeAB5SM.mjs";
+import "./api-DG5W6iwx.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-CJrRjvat.mjs";
+
+export { PortalDaemonClient };

package/dist/js/{print-OvYyj6Uk.mjs → print-DQtIEVHh.mjs}

@@ -638,10 +638,11 @@ function formatConnectCard(card) {
 * disambiguate: an `--agent` selector must match exactly one agent, and
 * when it's omitted we only auto-pick if the account has exactly one.
 */
-async function runPrint({ appUrl, sessionToken, prompt, agentSelector, conversationId, json, machineShare, grantTargetAgent }) {
+async function runPrint({ appUrl, sessionToken, workspaceId, prompt, agentSelector, conversationId, json, machineShare, grantTargetAgent }) {
 	const client = createRestClient({
 		appUrl,
-		sessionToken
+		sessionToken,
+		workspaceId
 	});
 	const agent = resolveAgent(await client.listAgents({
 		scope: "org",

package/dist/js/{print-C8DHKrJu.mjs → print-Pi0PQRj8.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-OvYyj6Uk.mjs";
+import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-DQtIEVHh.mjs";
 import "./rest-Dx6b-Nq_.mjs";
 import "./billing-blocked-2wju4gC_.mjs";
 

package/dist/js/{profiler-zp3MKUcM.mjs → profiler-DxmQ_Xqv.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { S as getConfigPath } from "./print-OvYyj6Uk.mjs";
+import { S as getConfigPath } from "./print-DQtIEVHh.mjs";
 import os from "node:os";
 import path from "node:path";
 import { err, ok } from "neverthrow";
@@ -8,7 +8,7 @@ import fs from "node:fs";
 
 //#region package.json
 var name = "skydive-cli";
-var version$1 = "0.5.0-beta.22";
+var version$1 = "0.5.0-beta.24";
 
 //#endregion
 //#region src/auth/organization.ts
@@ -32,6 +32,32 @@ async function listWorkspaces({ appUrl, sessionToken }) {
 	}
 }
 /**
+* Match a workspace selector against a roster the way `workspace switch` does:
+* exact id first, then case-insensitive slug, then case-insensitive name.
+* Returns null when nothing matches. Pure — the caller owns fetching and error
+* messaging.
+*/
+function matchWorkspace(workspaces, selector) {
+	const needle = selector.trim().toLowerCase();
+	return workspaces.find((w) => w.id === selector) ?? workspaces.find((w) => w.slug.toLowerCase() === needle) ?? workspaces.find((w) => w.name.toLowerCase() === needle) ?? null;
+}
+/**
+* Resolve a workspace selector (slug, name, or id) to its id by listing the
+* account's workspaces and matching. Used by any command that takes a
+* `--workspace` flag to scope requests without persisting an active-workspace
+* switch.
+*/
+async function resolveWorkspaceId({ appUrl, sessionToken, selector }) {
+	const workspaces = await listWorkspaces({
+		appUrl,
+		sessionToken
+	});
+	if (workspaces.isErr()) return err(workspaces.error);
+	const match = matchWorkspace(workspaces.value, selector);
+	if (!match) return err({ message: `No workspace matches "${selector}". Run \`skydive workspace list\` to see available workspaces.` });
+	return ok(match);
+}
+/**
 * Resolve who the current chat session belongs to: the signed-in user's
 * email/name and the active workspace. Used by `auth status` so a user running
 * multiple accounts can answer "am I logged into the right one?" without
@@ -125,6 +151,199 @@ async function ensureActiveOrganization({ appUrl, sessionToken }) {
 	});
 }
 
+//#endregion
+//#region src/shell/shell-env.ts
+/**
+* Shared, dependency-light shell primitives used by anything that edits the
+* user's shell startup files — `completion install` and `agents alias`. Kept
+* free of yargs and the CLI's output layer so the TUI can import it without
+* dragging command machinery into its bundle or creating a TUI -> commands
+* import cycle.
+*/
+const SUPPORTED_SHELLS = [
+	"bash",
+	"zsh",
+	"fish"
+];
+const defaultInstallEnv = () => ({
+	home: os.homedir(),
+	platform: process.platform,
+	env: process.env,
+	exists: fs.existsSync
+});
+/**
+* The shell to act on when the user didn't name one. `$SHELL` is the only
+* signal available: an install runs as a child process, so the invoking
+* shell's own variables (`$ZSH_VERSION`, `$FISH_VERSION`) aren't visible here.
+*/
+function detectShell(env = process.env) {
+	const shell = env["SHELL"];
+	if (!shell) return null;
+	const name = path.basename(shell);
+	return SUPPORTED_SHELLS.find((candidate) => name === candidate) ?? null;
+}
+
+//#endregion
+//#region src/commands/agent-alias.ts
+/**
+* Shell aliases that point a friendly command name at a specific agent's chat.
+*
+* When someone creates an agent named "Ripple", they almost always want to
+* reach it again by typing `ripple`, not `skydive chat --agent <uuid>`. This
+* module writes a managed alias block into the user's shell startup file so
+* `ripple` opens that agent. It reuses the same shell detection and startup-file
+* machinery as `completion install` (imported from ./completion), so the two
+* features agree on which file to touch and how to detect the shell.
+*
+* The alias always targets the agent **id**, never its name: names are not
+* unique and can be renamed, so an id keeps `ripple` pointed at the same agent
+* even if a second "Ripple" is created later or this one is renamed.
+*/
+/**
+* Turn a display name into a shell-safe alias token: lowercase, non-alnum runs
+* collapsed to a single hyphen, leading/trailing hyphens trimmed. "Ripple" ->
+* "ripple", "My Agent" -> "my-agent", "Ripple 2.0" -> "ripple-2-0".
+*
+* A leading digit is prefixed with `a-` because bash rejects an alias name that
+* starts with a digit (`alias 2fast=...` is a syntax error). An empty result
+* (a name that was all punctuation) falls back to "agent" so callers always get
+* a usable token to offer or dedupe from.
+*/
+function slugifyAliasName(name) {
+	const slug = name.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+	if (!slug) return "agent";
+	return /^[0-9]/.test(slug) ? `a-${slug}` : slug;
+}
+/**
+* The alias token to actually install, given a preferred token and the set of
+* names already taken (existing aliases, and — the caller's choice — commands
+* on PATH). Prefers the clean token; on a collision appends the lowest integer
+* that frees it: `ripple` -> `ripple2` -> `ripple3`. Matching is
+* case-insensitive because shells treat `Ripple` and `ripple` as distinct
+* aliases but a user typing one means the other.
+*/
+function dedupeAliasName(preferred, taken) {
+	const takenLower = new Set(Array.from(taken, (t) => t.trim().toLowerCase()).filter(Boolean));
+	if (!takenLower.has(preferred.toLowerCase())) return preferred;
+	for (let n = 2;; n += 1) {
+		const candidate = `${preferred}${n}`;
+		if (!takenLower.has(candidate.toLowerCase())) return candidate;
+	}
+}
+/** The startup file an alias block belongs in, per shell. */
+function aliasTarget(shell, deps = defaultInstallEnv()) {
+	const { home, platform, env, exists } = deps;
+	if (shell === "fish") {
+		const configHome = env["XDG_CONFIG_HOME"] || path.join(home, ".config");
+		return path.join(configHome, "fish", "config.fish");
+	}
+	if (shell === "zsh") {
+		const zdotdir = env["ZDOTDIR"] || home;
+		return path.join(zdotdir, ".zshrc");
+	}
+	const rc = path.join(home, ".bashrc");
+	const profile = path.join(home, ".bash_profile");
+	const preferred = platform === "darwin" ? profile : rc;
+	const alternate = platform === "darwin" ? rc : profile;
+	if (!exists(preferred) && exists(alternate)) return alternate;
+	return preferred;
+}
+const BLOCK_START = "###-begin-skydive-agent-aliases-###";
+const BLOCK_END = "###-end-skydive-agent-aliases-###";
+const aliasLine = (entry) => {
+	const ws = entry.workspaceId ? ` --workspace ${entry.workspaceId}` : "";
+	return `alias ${entry.alias}='skydive chat --agent ${entry.agentId}${ws} --new' # skydive-agent:${entry.agentId}`;
+};
+/**
+* Parse the alias entries already inside the managed block. Used to merge a new
+* alias with existing ones and to answer "is this token taken?". Tolerant of
+* hand-edits: only well-formed lines carrying our trailing marker are read
+* back; anything else in the block is preserved verbatim on rewrite.
+*/
+function parseAliasBlock(existing) {
+	const start = existing.indexOf(BLOCK_START);
+	const end = existing.indexOf(BLOCK_END);
+	if (start === -1 || end <= start) return [];
+	const body = existing.slice(start + 35, end);
+	const entries = [];
+	for (const line of body.split("\n")) {
+		const match = line.match(/^alias\s+([^=]+)=.*# skydive-agent:([0-9a-f-]+)\s*$/i);
+		if (match?.[1] && match[2]) {
+			const wsMatch = line.match(/--workspace\s+(\S+)/);
+			entries.push({
+				alias: match[1].trim(),
+				agentId: match[2],
+				workspaceId: wsMatch?.[1]
+			});
+		}
+	}
+	return entries;
+}
+/**
+* Merge `entry` into the managed alias block of `existing`, returning the new
+* file contents. Idempotent: re-installing the same alias for the same agent is
+* a no-op edit; a new agent id adds a line; an existing agent id has its alias
+* token refreshed. The block is created if absent.
+*/
+function spliceAliasBlock(existing, entry) {
+	const current = parseAliasBlock(existing).filter((e) => e.agentId !== entry.agentId);
+	current.push(entry);
+	current.sort((a, b) => a.alias.localeCompare(b.alias));
+	const block = [
+		BLOCK_START,
+		"# skydive agent aliases, managed by `skydive agents alias`. Edits between",
+		"# these markers are overwritten when an alias is added or refreshed.",
+		...current.map(aliasLine),
+		BLOCK_END
+	].join("\n");
+	const start = existing.indexOf(BLOCK_START);
+	const endMarker = BLOCK_END;
+	const end = existing.indexOf(endMarker);
+	if (start !== -1 && end > start) return `${existing.slice(0, start)}${block}\n${existing.slice(end + 33).replace(/^\n/, "")}`;
+	return `${existing}${existing === "" || existing.endsWith("\n\n") ? "" : "\n"}\n${block}\n`;
+}
+/**
+* Write (or refresh) an agent alias in the user's shell startup file. Returns
+* the resolved shell, file, and the alias token actually used. Does not dedupe
+* on its own — pass a token already reconciled with `takenAliasNames` so the
+* caller controls the suggestion UX.
+*/
+function installAgentAlias(input, deps = defaultInstallEnv()) {
+	const target = aliasTarget(input.shell, deps);
+	const existing = deps.exists(target) ? fs.readFileSync(target, "utf8") : "";
+	const contents = spliceAliasBlock(existing, {
+		alias: input.alias,
+		agentId: input.agentId,
+		workspaceId: input.workspaceId
+	});
+	fs.mkdirSync(path.dirname(target), { recursive: true });
+	fs.writeFileSync(target, contents, "utf8");
+	return {
+		shell: input.shell,
+		path: target,
+		alias: input.alias,
+		agentId: input.agentId,
+		updated: existing.includes(BLOCK_START)
+	};
+}
+/**
+* Alias tokens already defined in our managed block of the given shell's
+* startup file. The dedupe source: a fresh install shouldn't collide with an
+* alias we wrote for another agent. (We don't try to read the user's own
+* hand-written aliases or PATH — a shell child process can't see the parent's
+* live alias table, and probing PATH is noisy; the dedupe covers our own
+* blocks, which is where real collisions come from in practice.)
+*/
+function takenAliasNames(shell, deps = defaultInstallEnv()) {
+	const target = aliasTarget(shell, deps);
+	if (!deps.exists(target)) return [];
+	return parseAliasBlock(fs.readFileSync(target, "utf8")).map((e) => e.alias);
+}
+/** What the user must do before the alias works in the shell they're in. */
+function aliasActivationHint(result) {
+	return result.shell === "fish" ? "Open a new fish shell to use it." : `Open a new shell, or run: source ${result.path}`;
+}
+
 //#endregion
 //#region src/chat/import-seed.ts
 /** Map `process.platform` to the OS family used by the seed prompts. Every
@@ -1299,4 +1518,4 @@ function maybeStartProfiling(argv, cliVersion) {
 }
 
 //#endregion
-export { setActiveWorkspace as A, themesForMode as C, getActiveWorkspaceId as D, ensureActiveOrganization as E, version$1 as M, getSessionIdentity as O, themes as S, machineOsFromPlatform as T, theme as _, installCrashHandler as a, themeModeFromColorFgBg as b, MARK_CELLS as c, splashFitsWidth as d, DEFAULT_THEME_ID as f, noColorRequested as g, monoTheme as h, writeArtifact as i, name as j, listWorkspaces as k, WORDMARK as l, findTheme as m, profilingEnabled as n, buildCrashReport as o, applyTheme as p, record as r, writeCrashReport as s, maybeStartProfiling as t, brandHelpArt as u, themeForMode as v, buildImportSeedPrompt as w, themeVersion as x, themeMode as y };
+export { takenAliasNames as A, name as B, themesForMode as C, dedupeAliasName as D, aliasActivationHint as E, getActiveWorkspaceId as F, getSessionIdentity as I, listWorkspaces as L, defaultInstallEnv as M, detectShell as N, installAgentAlias as O, ensureActiveOrganization as P, resolveWorkspaceId as R, themes as S, machineOsFromPlatform as T, version$1 as V, theme as _, installCrashHandler as a, themeModeFromColorFgBg as b, MARK_CELLS as c, splashFitsWidth as d, DEFAULT_THEME_ID as f, noColorRequested as g, monoTheme as h, writeArtifact as i, SUPPORTED_SHELLS as j, slugifyAliasName as k, WORDMARK as l, findTheme as m, profilingEnabled as n, buildCrashReport as o, applyTheme as p, record as r, writeCrashReport as s, maybeStartProfiling as t, brandHelpArt as u, themeForMode as v, buildImportSeedPrompt as w, themeVersion as x, themeMode as y, setActiveWorkspace as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skydive-cli",
-  "version": "0.5.0-beta.22",
+  "version": "0.5.0-beta.24",
   "description": "Skydive CLI — cloud agents from the command line",
   "homepage": "https://skydive.com",
   "license": "MIT",

package/dist/js/daemon-client-JDBIWms7.mjs

@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-import "./client-DbqRBquD.mjs";
-import "./daemon-Dnv9p14X.mjs";
-import "./api-DG5W6iwx.mjs";
-import { t as PortalDaemonClient } from "./daemon-client-Bb-6i20B.mjs";
-
-export { PortalDaemonClient };