skydive-cli 0.5.0-beta.27 → 0.5.0-beta.28

package/dist/js/bin.mjs

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
-import { A as takenAliasNames, B as name, D as dedupeAliasName, E as aliasActivationHint, F as getActiveWorkspaceId, I as getSessionIdentity, L as listWorkspaces, M as defaultInstallEnv, N as detectShell, O as installAgentAlias, P as ensureActiveOrganization, R as resolveWorkspaceId, S as themes, T as machineOsFromPlatform, V as version, a as installCrashHandler, j as SUPPORTED_SHELLS, k as slugifyAliasName, t as maybeStartProfiling, u as brandHelpArt, w as buildImportSeedPrompt, z as setActiveWorkspace } from "./profiler-DLIjDaz_.mjs";
+import { A as takenAliasNames, B as name, D as dedupeAliasName, E as aliasActivationHint, F as getActiveWorkspaceId, I as getSessionIdentity, L as listWorkspaces, M as defaultInstallEnv, N as detectShell, O as installAgentAlias, P as ensureActiveOrganization, R as resolveWorkspaceId, S as themes, T as machineOsFromPlatform, V as version, a as installCrashHandler, j as SUPPORTED_SHELLS, k as slugifyAliasName, t as maybeStartProfiling, u as brandHelpArt, w as buildImportSeedPrompt, z as setActiveWorkspace } from "./profiler-rC7AZSxL.mjs";
 import { A as getShareMachineDefault, C as getConfigPath, D as getPromptHistoryPath, E as getPreference, F as resolveAppUrl, H as saveSession, I as resolveChatAuth, L as resolveConfig, M as getStoredApiKeyWorkspaceName, N as getUpdateCheckDisabled, R as resolveManagementAuth, S as deleteConfig, T as getLastSeenVersion, V as saveConfig, W as setLastSeenVersion, _ as API_KEY_FAMILY_PREFIX, g as API_KEYS_URL, i as resolveAgent$1, j as getStoredApiKeyId, v as API_KEY_PREFIX, w as getDefaultAgent, x as PREFERENCES, y as DEFAULT_API_URL, z as resolveSession } from "./print-DYiQC5IW.mjs";
 import { n as printError, r as printTable, t as output } from "./output-DYzzdXYV.mjs";
 import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
 import { t as createRestClient } from "./rest-xXfqT4SX.mjs";
 import "./billing-blocked-2wju4gC_.mjs";
 import { r as resolveMachineIdentity } from "./client-DbqRBquD.mjs";
-import { i as queryDaemonStatus, l as PORTAL_DAEMON_FLAG, n as ensureDaemonRunning, s as stopDaemon, u as daemonPaths } from "./daemon-DGsTcIVx.mjs";
+import { i as queryDaemonStatus, l as PORTAL_DAEMON_FLAG, n as ensureDaemonRunning, s as stopDaemon, u as daemonPaths } from "./daemon-B5SNuIhD.mjs";
 import { i as grantPortalAccess, n as fetchPortalDevices, o as registerPortalDevice, r as findThisDevice, s as revokePortalAccess } from "./api-DG5W6iwx.mjs";
 import { t as SandboxStream } from "./client-c4c5MmgN.mjs";
 import { hideBin } from "yargs/helpers";
@@ -1584,7 +1584,7 @@ const importCommand = {
 				process.exit(1);
 			}
 		}
-		const { runChat } = await import("./boot-DDmudCUI.mjs");
+		const { runChat } = await import("./boot-DPB2qX9x.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
@@ -2029,7 +2029,7 @@ const chatCommand = {
 			sessionToken: auth.value.token,
 			agentSelector: argv.agent ?? null
 		});
-		const { runChat } = await import("./boot-DDmudCUI.mjs");
+		const { runChat } = await import("./boot-DPB2qX9x.mjs");
 		await runChat({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -2411,7 +2411,7 @@ const switchCommand = {
 				printError("The workspace picker needs the Bun runtime and it could not be set up automatically. Pass a workspace slug instead, or install Bun and retry.");
 				process.exit(1);
 			}
-			const { runWorkspacePicker } = await import("./boot-DDmudCUI.mjs");
+			const { runWorkspacePicker } = await import("./boot-DPB2qX9x.mjs");
 			await runWorkspacePicker(session);
 			return;
 		}
@@ -2490,7 +2490,7 @@ const openCommand = {
 		const agent = argv.agent ? resolveAgent$1((await fetchPortalDevices(session)).agents, argv.agent) : null;
 		const cwd = argv.cwd ? path.resolve(argv.cwd) : process.cwd();
 		const { machineName } = await resolveMachineIdentity(null);
-		const { PortalDaemonClient } = await import("./daemon-client-JFzZrNRz.mjs");
+		const { PortalDaemonClient } = await import("./daemon-client-C6d14JU1.mjs");
 		let lastLine = "";
 		let signalConnected;
 		const connected = new Promise((resolve) => {
@@ -2736,7 +2736,7 @@ const forwardCommand = {
 		const agent = resolveAgent$1((await fetchPortalDevices(session)).agents, argv.agent ?? null);
 		const targetPort = argv.port;
 		const localPort = argv["local-port"] ?? targetPort;
-		const { startForward } = await import("./forward-18QoL5dO.mjs");
+		const { startForward } = await import("./forward-DL6DYqyc.mjs");
 		const listener = await startForward({
 			auth: session,
 			agentId: agent.id,
@@ -4336,7 +4336,7 @@ if (process.argv.includes(UPDATE_WORKER_FLAG)) {
 	process.exit(0);
 }
 if (process.argv.includes(PORTAL_DAEMON_FLAG)) {
-	const { runPortalDaemon } = await import("./daemon-DnADJ1gG.mjs");
+	const { runPortalDaemon } = await import("./daemon-C5e4hKwL.mjs");
 	runPortalDaemon(process.argv);
 } else runCli();
 function runCli() {

package/dist/js/{boot-DDmudCUI.mjs → boot-DPB2qX9x.mjs}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
-import { A as takenAliasNames, C as themesForMode, D as dedupeAliasName, E as aliasActivationHint, F as getActiveWorkspaceId, L as listWorkspaces, N as detectShell, O as installAgentAlias, T as machineOsFromPlatform, _ as theme, a as installCrashHandler, b as themeModeFromColorFgBg, c as MARK_CELLS, d as splashFitsWidth, f as DEFAULT_THEME_ID, g as noColorRequested, h as monoTheme, i as writeArtifact, k as slugifyAliasName, l as WORDMARK, m as findTheme, n as profilingEnabled, o as buildCrashReport, p as applyTheme, r as record, s as writeCrashReport, v as themeForMode, x as themeVersion, y as themeMode, z as setActiveWorkspace } from "./profiler-DLIjDaz_.mjs";
+import { A as takenAliasNames, C as themesForMode, D as dedupeAliasName, E as aliasActivationHint, F as getActiveWorkspaceId, L as listWorkspaces, N as detectShell, O as installAgentAlias, T as machineOsFromPlatform, _ as theme, a as installCrashHandler, b as themeModeFromColorFgBg, c as MARK_CELLS, d as splashFitsWidth, f as DEFAULT_THEME_ID, g as noColorRequested, h as monoTheme, i as writeArtifact, k as slugifyAliasName, l as WORDMARK, m as findTheme, n as profilingEnabled, o as buildCrashReport, p as applyTheme, r as record, s as writeCrashReport, v as themeForMode, x as themeVersion, y as themeMode, z as setActiveWorkspace } from "./profiler-rC7AZSxL.mjs";
 import { B as resolveWebUrl, C as getConfigPath, O as getReviewStateDir, P as recordDefaultAgent, U as saveTheme, b as DEFAULT_APP_URL, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, h as specKeyFor, i as resolveAgent, k as getSavedTheme, l as parseExternalOauthConnectParams, m as parseConnectCard, p as computeSettledLabel, s as MASK_CHAR, u as parseOauthConnectParams, y as DEFAULT_API_URL } from "./print-DYiQC5IW.mjs";
 import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
 import { a as isRecord, i as errorMessage, n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-xXfqT4SX.mjs";
 import { i as billingBlockedOutcomeFromSendResponse } from "./billing-blocked-2wju4gC_.mjs";
 import { t as PortalClient } from "./client-DbqRBquD.mjs";
-import "./daemon-DGsTcIVx.mjs";
+import "./daemon-B5SNuIhD.mjs";
 import "./api-DG5W6iwx.mjs";
 import { t as SandboxStream } from "./client-c4c5MmgN.mjs";
-import { t as PortalDaemonClient } from "./daemon-client-CwkdmYOc.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-CneyOup7.mjs";
 import { t as runRawPtyPassthrough } from "./raw-pty-DY4KelZW.mjs";
 import * as os$1 from "node:os";
 import { homedir, platform, release, tmpdir } from "node:os";

package/dist/js/{daemon-DGsTcIVx.mjs → daemon-B5SNuIhD.mjs}

@@ -20,7 +20,7 @@ import { access, appendFile, mkdir, readFile, unlink, writeFile } from "node:fs/
 * the commit time of the built tree is one monotonic clock they share.
 */
 function portalDaemonBuild() {
-	return "1786738566";
+	return "1786741092";
 }
 /**
 * Whether a client carrying `mine` should replace a running daemon carrying

package/dist/js/{daemon-DnADJ1gG.mjs → daemon-C5e4hKwL.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import "./client-DbqRBquD.mjs";
-import { a as runPortalDaemon, i as queryDaemonStatus, n as ensureDaemonRunning, o as startPortalDaemon, r as isDaemonListening, s as stopDaemon, t as PortalDaemon } from "./daemon-DGsTcIVx.mjs";
+import { a as runPortalDaemon, i as queryDaemonStatus, n as ensureDaemonRunning, o as startPortalDaemon, r as isDaemonListening, s as stopDaemon, t as PortalDaemon } from "./daemon-B5SNuIhD.mjs";
 import "./api-DG5W6iwx.mjs";
 
 export { runPortalDaemon };

package/dist/js/daemon-client-C6d14JU1.mjs

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import "./client-DbqRBquD.mjs";
+import "./daemon-B5SNuIhD.mjs";
+import "./api-DG5W6iwx.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-CneyOup7.mjs";
+
+export { PortalDaemonClient };

package/dist/js/{daemon-client-CwkdmYOc.mjs → daemon-client-CneyOup7.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { c as LOCAL_PROTOCOL_VERSION, d as encodeLine, f as makeLineParser, n as ensureDaemonRunning, p as parseDaemonMessage, u as daemonPaths } from "./daemon-DGsTcIVx.mjs";
+import { c as LOCAL_PROTOCOL_VERSION, d as encodeLine, f as makeLineParser, n as ensureDaemonRunning, p as parseDaemonMessage, u as daemonPaths } from "./daemon-B5SNuIhD.mjs";
 import { randomUUID } from "node:crypto";
 import { connect } from "node:net";
 

package/dist/js/forward-DL6DYqyc.mjs

@@ -0,0 +1,187 @@
+#!/usr/bin/env node
+import { t as fetchForwardTarget } from "./api-DG5W6iwx.mjs";
+import net from "node:net";
+import { WebSocket, createWebSocketStream } from "ws";
+
+//#region src/chat/portal/tunnel-pool.ts
+const MAX_AGE_MS = 4e4;
+const SWEEP_INTERVAL_MS = 1e4;
+const REFILL_BACKOFF_MS = 15e3;
+/**
+* Pre-warmed tunnel pool for the forward portal's accept path.
+*
+* Dialing a tunnel costs a full edge round-trip (~300ms measured). The pool
+* pays that in the background so accept can adopt a warm tunnel and move the
+* first byte immediately. Target starts at `initialSize` and grows by one on
+* each miss, never above `maxSize` — a miss still cold-dials (today's path);
+* growth only helps the next wave. No decay: a runaway client can hold
+* `maxSize` idle edge sockets until `forward` exits.
+*
+* `dial` must resolve with a stream that is already paused, so any bytes a
+* server-first protocol sends before adoption buffer instead of dropping.
+*/
+function createTunnelPool({ initialSize, maxSize, dial, log }) {
+	let entries = [];
+	let dialsInFlight = 0;
+	let backoffUntil = 0;
+	let closed = false;
+	let targetSize = initialSize;
+	function refill() {
+		if (closed) return;
+		if (Date.now() < backoffUntil) return;
+		while (entries.length + dialsInFlight < targetSize) {
+			dialsInFlight += 1;
+			dial().then((tunnel) => {
+				dialsInFlight -= 1;
+				if (closed) {
+					tunnel.close();
+					return;
+				}
+				const entry = {
+					tunnel,
+					dialedAt: Date.now(),
+					dead: false
+				};
+				tunnel.stream.once("close", () => {
+					entry.dead = true;
+				});
+				tunnel.stream.once("error", () => {
+					entry.dead = true;
+				});
+				entries.push(entry);
+			}).catch((err) => {
+				dialsInFlight -= 1;
+				backoffUntil = Date.now() + REFILL_BACKOFF_MS;
+				log(`forward: pool dial failed (backing off): ${err instanceof Error ? err.message : String(err)}`);
+			});
+		}
+	}
+	function sweep() {
+		const now = Date.now();
+		const keep = [];
+		for (const entry of entries) if (entry.dead || now - entry.dialedAt > MAX_AGE_MS) entry.tunnel.close();
+		else keep.push(entry);
+		entries = keep;
+		refill();
+	}
+	const sweeper = setInterval(sweep, SWEEP_INTERVAL_MS);
+	sweeper.unref();
+	refill();
+	return {
+		take: () => {
+			while (entries.length > 0) {
+				const entry = entries.pop();
+				if (!entry) break;
+				if (entry.dead || entry.tunnel.stream.destroyed) continue;
+				refill();
+				return entry.tunnel;
+			}
+			if (targetSize < maxSize) targetSize += 1;
+			refill();
+			return null;
+		},
+		close: () => {
+			closed = true;
+			clearInterval(sweeper);
+			for (const entry of entries) entry.tunnel.close();
+			entries = [];
+		}
+	};
+}
+
+//#endregion
+//#region src/chat/portal/forward.ts
+const TARGET_REFRESH_SAFETY_MS = 12e4;
+const INITIAL_POOL_SIZE = 8;
+const MAX_POOL_SIZE = 16;
+/**
+* The reverse portal's client half: listen on the local machine's loopback and
+* pipe each TCP connection to the agent sandbox's daemon (`/portal/tcp`),
+* which pipes to the sandbox's own loopback. The daemon is reached through the
+* agent-webserver edge Worker (sandboxes have public ingress disabled; the
+* Worker owns boot-resolution and injects the sandbox edge-auth token), so a
+* sandbox recycle just costs the next connection a cold-start wait rather
+* than invalidating the forward.
+*/
+async function startForward({ auth, agentId, localPort, targetPort, log }) {
+	let target = await fetchForwardTarget(auth, agentId);
+	let mintedAt = Date.now();
+	async function freshTarget() {
+		const ttlMs = target.expiresInSeconds * 1e3;
+		if (Date.now() - mintedAt > ttlMs - TARGET_REFRESH_SAFETY_MS) {
+			target = await fetchForwardTarget(auth, agentId);
+			mintedAt = Date.now();
+		}
+		return target;
+	}
+	/**
+	* Dial one tunnel through the edge to the daemon's /portal/tcp. Resolves
+	* once the upgrade completes, with the duplex PAUSED — the pool holds it
+	* warm without dropping any early bytes, and adoption resumes it by piping.
+	*/
+	async function dialTunnel() {
+		const resolved = await freshTarget();
+		const ws = new WebSocket(`${resolved.daemonOrigin.replace(/^http/, "ws")}/portal/tcp?port=${targetPort}`, { headers: { authorization: `Bearer ${resolved.token}` } });
+		return new Promise((resolve, reject) => {
+			ws.once("error", reject);
+			ws.once("open", () => {
+				ws.removeListener("error", reject);
+				const stream = createWebSocketStream(ws);
+				stream.pause();
+				resolve({
+					stream,
+					close: () => stream.destroy()
+				});
+			});
+		});
+	}
+	const pool = createTunnelPool({
+		initialSize: INITIAL_POOL_SIZE,
+		maxSize: MAX_POOL_SIZE,
+		dial: dialTunnel,
+		log
+	});
+	const server = net.createServer((sock) => {
+		sock.pause();
+		const warm = pool.take();
+		if (warm) {
+			warm.stream.on("error", () => sock.destroy());
+			sock.on("error", () => warm.stream.destroy());
+			sock.pipe(warm.stream).pipe(sock);
+			sock.resume();
+			return;
+		}
+		(async () => {
+			let tunnel;
+			try {
+				tunnel = await dialTunnel();
+			} catch (err) {
+				log(`forward: tunnel connect failed: ${err instanceof Error ? err.message : String(err)}`);
+				sock.destroy();
+				return;
+			}
+			tunnel.stream.on("error", () => sock.destroy());
+			sock.on("error", () => tunnel.stream.destroy());
+			sock.pipe(tunnel.stream).pipe(sock);
+			sock.resume();
+		})();
+	});
+	await new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen(localPort, "127.0.0.1", () => {
+			server.removeListener("error", reject);
+			resolve();
+		});
+	});
+	const addr = server.address();
+	return {
+		port: addr && typeof addr === "object" ? addr.port : localPort,
+		close: () => new Promise((resolve) => {
+			pool.close();
+			server.close(() => resolve());
+		})
+	};
+}
+
+//#endregion
+export { startForward };

package/dist/js/{profiler-DLIjDaz_.mjs → profiler-rC7AZSxL.mjs}

@@ -8,7 +8,7 @@ import fs from "node:fs";
 
 //#region package.json
 var name = "skydive-cli";
-var version$1 = "0.5.0-beta.27";
+var version$1 = "0.5.0-beta.28";
 
 //#endregion
 //#region src/auth/organization.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skydive-cli",
-  "version": "0.5.0-beta.27",
+  "version": "0.5.0-beta.28",
   "description": "Skydive CLI — cloud agents from the command line",
   "homepage": "https://skydive.com",
   "license": "MIT",

package/dist/js/daemon-client-JFzZrNRz.mjs

@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-import "./client-DbqRBquD.mjs";
-import "./daemon-DGsTcIVx.mjs";
-import "./api-DG5W6iwx.mjs";
-import { t as PortalDaemonClient } from "./daemon-client-CwkdmYOc.mjs";
-
-export { PortalDaemonClient };

package/dist/js/forward-18QoL5dO.mjs

@@ -1,68 +0,0 @@
-#!/usr/bin/env node
-import { t as fetchForwardTarget } from "./api-DG5W6iwx.mjs";
-import net from "node:net";
-import { WebSocket, createWebSocketStream } from "ws";
-
-//#region src/chat/portal/forward.ts
-const TARGET_REFRESH_SAFETY_MS = 12e4;
-/**
-* The reverse portal's client half: listen on the local machine's loopback and
-* pipe each TCP connection to the agent sandbox's daemon (`/portal/tcp`),
-* which pipes to the sandbox's own loopback. The daemon is reached through the
-* agent-webserver edge Worker (sandboxes have public ingress disabled; the
-* Worker owns boot-resolution and injects the sandbox edge-auth token), so a
-* sandbox recycle just costs the next connection a cold-start wait rather
-* than invalidating the forward.
-*/
-async function startForward({ auth, agentId, localPort, targetPort, log }) {
-	let target = await fetchForwardTarget(auth, agentId);
-	let mintedAt = Date.now();
-	async function freshTarget() {
-		const ttlMs = target.expiresInSeconds * 1e3;
-		if (Date.now() - mintedAt > ttlMs - TARGET_REFRESH_SAFETY_MS) {
-			target = await fetchForwardTarget(auth, agentId);
-			mintedAt = Date.now();
-		}
-		return target;
-	}
-	const server = net.createServer((sock) => {
-		sock.pause();
-		(async () => {
-			let resolved;
-			try {
-				resolved = await freshTarget();
-			} catch (err) {
-				log(`forward: token refresh failed: ${err instanceof Error ? err.message : String(err)}`);
-				sock.destroy();
-				return;
-			}
-			const ws = new WebSocket(`${resolved.daemonOrigin.replace(/^http/, "ws")}/portal/tcp?port=${targetPort}`, { headers: { authorization: `Bearer ${resolved.token}` } });
-			ws.on("open", () => {
-				const stream = createWebSocketStream(ws);
-				stream.on("error", () => sock.destroy());
-				sock.on("error", () => stream.destroy());
-				sock.pipe(stream).pipe(sock);
-				sock.resume();
-			});
-			ws.on("error", (err) => {
-				log(`forward: tunnel connect failed: ${err.message}`);
-				sock.destroy();
-			});
-		})();
-	});
-	await new Promise((resolve, reject) => {
-		server.once("error", reject);
-		server.listen(localPort, "127.0.0.1", () => {
-			server.removeListener("error", reject);
-			resolve();
-		});
-	});
-	const addr = server.address();
-	return {
-		port: addr && typeof addr === "object" ? addr.port : localPort,
-		close: () => new Promise((resolve) => server.close(() => resolve()))
-	};
-}
-
-//#endregion
-export { startForward };