skydive-cli 0.5.0-beta.31 → 0.5.0-beta.33

package/dist/js/bin.mjs

@@ -1,14 +1,15 @@
 #!/usr/bin/env node
-import { A as takenAliasNames, B as name, D as dedupeAliasName, E as aliasActivationHint, F as getActiveWorkspaceId, I as getSessionIdentity, L as listWorkspaces, M as defaultInstallEnv, N as detectShell, O as installAgentAlias, P as ensureActiveOrganization, R as resolveWorkspaceId, S as themes, T as machineOsFromPlatform, V as version, a as installCrashHandler, j as SUPPORTED_SHELLS, k as slugifyAliasName, t as maybeStartProfiling, u as brandHelpArt, w as buildImportSeedPrompt, z as setActiveWorkspace } from "./profiler-BVbYs_Yg.mjs";
-import { A as getShareMachineDefault, C as getConfigPath, D as getPromptHistoryPath, E as getPreference, F as resolveAppUrl, H as saveSession, I as resolveChatAuth, L as resolveConfig, M as getStoredApiKeyWorkspaceName, N as getUpdateCheckDisabled, R as resolveManagementAuth, S as deleteConfig, T as getLastSeenVersion, V as saveConfig, W as setLastSeenVersion, _ as API_KEY_FAMILY_PREFIX, g as API_KEYS_URL, i as resolveAgent$1, j as getStoredApiKeyId, v as API_KEY_PREFIX, w as getDefaultAgent, x as PREFERENCES, y as DEFAULT_API_URL, z as resolveSession } from "./print-C_TnQSPg.mjs";
-import { n as printError, r as printTable, t as output } from "./output-DYzzdXYV.mjs";
-import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
-import { t as createRestClient } from "./rest-CgfbKXst.mjs";
-import "./billing-blocked-2wju4gC_.mjs";
-import { r as resolveMachineIdentity } from "./client-DbqRBquD.mjs";
-import { i as queryDaemonStatus, l as PORTAL_DAEMON_FLAG, n as ensureDaemonRunning, s as stopDaemon, u as daemonPaths } from "./daemon-BTyg329O.mjs";
-import { i as grantPortalAccess, n as fetchPortalDevices, o as registerPortalDevice, r as findThisDevice, s as revokePortalAccess } from "./api-DG5W6iwx.mjs";
-import { t as SandboxStream } from "./client-c4c5MmgN.mjs";
+import { A as installAgentAlias, B as resolveWorkspaceId, D as machineOsFromPlatform, E as buildImportSeedPrompt, F as detectShell, H as name, I as ensureActiveOrganization, L as getActiveWorkspaceId, M as takenAliasNames, N as SUPPORTED_SHELLS, O as aliasActivationHint, P as defaultInstallEnv, R as getSessionIdentity, U as version, V as setActiveWorkspace, c as getAutomaticLogsDir, j as slugifyAliasName, k as dedupeAliasName, l as maybeStartProfiling, o as brandHelpArt, t as installCrashHandler, u as profileDir, w as themes, z as listWorkspaces } from "./install-BPUAm8bS.mjs";
+import { A as getShareMachineDefault, C as getConfigPath, D as getPromptHistoryPath, E as getPreference, F as resolveAppUrl, H as saveSession, I as resolveChatAuth, L as resolveConfig, M as getStoredApiKeyWorkspaceName, N as getUpdateCheckDisabled, R as resolveManagementAuth, S as deleteConfig, T as getLastSeenVersion, V as saveConfig, W as setLastSeenVersion, _ as API_KEY_FAMILY_PREFIX, g as API_KEYS_URL, i as resolveAgent$1, j as getStoredApiKeyId, v as API_KEY_PREFIX, w as getDefaultAgent, x as PREFERENCES, y as DEFAULT_API_URL, z as resolveSession$1 } from "./print-Clgq46GU.mjs";
+import { n as printError, r as printTable, t as output } from "./output-wY0VQDea.mjs";
+import { t as HttpError } from "./http-error-UHH3mVBF.mjs";
+import { t as createRestClient } from "./rest-C6E4mS2A.mjs";
+import "./billing-blocked-D3l5kJlX.mjs";
+import { r as resolveMachineIdentity } from "./client-d6K9qm6B.mjs";
+import { i as queryDaemonStatus, l as PORTAL_DAEMON_FLAG, n as ensureDaemonRunning, s as stopDaemon, u as daemonPaths } from "./daemon-BPGZufS1.mjs";
+import "./tls-cert-CV-pwxVN.mjs";
+import { i as grantPortalAccess, n as fetchPortalDevices, o as registerPortalDevice, r as findThisDevice, s as revokePortalAccess } from "./api-DQCaztBg.mjs";
+import { t as SandboxStream } from "./client-BTQ1fwzM.mjs";
 import { hideBin } from "yargs/helpers";
 import yargs from "yargs";
 import { hostname, tmpdir } from "node:os";
@@ -24,6 +25,7 @@ import fsp, { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
 import { quote } from "shell-quote";
 import semver from "semver";
 import { createInterface } from "node:readline";
+import { createInterface as createInterface$1 } from "node:readline/promises";
 
 //#region src/types.ts
 const NON_INTERACTIVE_ENV_VARS = [
@@ -619,7 +621,7 @@ const logoutCommand = {
 		const keyId = getStoredApiKeyId();
 		let keyRevoked = false;
 		if (keyId) {
-			const session = resolveSession({ appUrl: argv["api-url"] });
+			const session = resolveSession$1({ appUrl: argv["api-url"] });
 			const config = resolveConfig({ apiUrl: argv["api-url"] });
 			const credential = session.isOk() ? {
 				appUrl: session.value.appUrl,
@@ -650,7 +652,7 @@ const statusCommand$1 = {
 	describe: "Show current authentication state",
 	handler: async (argv) => {
 		const apiKey = resolveConfig({ apiUrl: argv["api-url"] });
-		const session = resolveSession({});
+		const session = resolveSession$1({});
 		const management = resolveManagementAuth({ apiUrl: argv["api-url"] });
 		const identity = session.isOk() ? (await getSessionIdentity({
 			appUrl: session.value.appUrl,
@@ -1000,7 +1002,7 @@ const completionCommand = {
 * resolve-or-exit block isn't copy-pasted per command.
 */
 function requireSession(argv) {
-	const session = resolveSession({ appUrl: resolveAppUrl({ appUrl: argv["api-url"] }) });
+	const session = resolveSession$1({ appUrl: resolveAppUrl({ appUrl: argv["api-url"] }) });
 	if (session.isErr()) {
 		printError(`${session.error.message} Run \`skydive auth login\` first, or set SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
@@ -1065,7 +1067,7 @@ async function resolveAgent(client, selector) {
 	if (matches.length === 0) throw new Error(`No agent named "${selector}". Pass an id, or run \`skydive agents list\`.`);
 	throw new Error(`Multiple agents named "${selector}". Pass the id instead:\n${matches.map((a) => `  ${a.name}  ${a.id}`).join("\n")}`);
 }
-const listCommand$5 = {
+const listCommand$6 = {
 	command: "list",
 	describe: "List agents in the active workspace",
 	builder: (y) => y.option("limit", {
@@ -1289,7 +1291,7 @@ const aliasCommand = {
 const agentsCommand = {
 	command: "agents",
 	describe: "Manage agents",
-	builder: (y) => y.command(listCommand$5).command(getCommand$2).command(createCommand$1).command(aliasCommand).demandCommand(1, "Specify a subcommand: list, get, create, alias"),
+	builder: (y) => y.command(listCommand$6).command(getCommand$2).command(createCommand$1).command(aliasCommand).demandCommand(1, "Specify a subcommand: list, get, create, alias"),
 	handler: () => {}
 };
 
@@ -1571,20 +1573,20 @@ const importCommand = {
 			printError(`import needs the Bun runtime and it couldn't be set up automatically. Install Bun (https://bun.sh) and run \`bun ${process.argv[1] ?? "skydive"} import\`, point SKYDIVE_BUN_PATH at an existing bun binary, or use the non-interactive \`import -p\` (runs under Node).`);
 			process.exit(1);
 		}
-		let session = resolveSession({ appUrl });
+		let session = resolveSession$1({ appUrl });
 		if (session.isErr()) {
 			const login = await loginWithDevice({ appUrl });
 			if (login.isErr()) {
 				printError(login.error.message);
 				process.exit(1);
 			}
-			session = resolveSession({ appUrl });
+			session = resolveSession$1({ appUrl });
 			if (session.isErr()) {
 				printError("Signed in, but no session was stored.");
 				process.exit(1);
 			}
 		}
-		const { runChat } = await import("./boot-iaVSnd7h.mjs");
+		const { runChat } = await import("./boot-C5HJfwRS.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
@@ -1609,12 +1611,12 @@ const importCommand = {
 * (`chat -p "go ahead" --resume <id> --share-machine`) to apply it.
 */
 async function runImportPrintMode({ argv, appUrl }) {
-	const session = resolveSession({ appUrl });
+	const session = resolveSession$1({ appUrl });
 	if (session.isErr()) {
 		printError(`${session.error.message} For non-interactive use, run \`skydive auth login --web\` first, or set SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { connectMachineShare } = await import("./print-share-BH9gvCls.mjs");
+	const { connectMachineShare } = await import("./print-share-BBy3OTno.mjs");
 	const machineShare = await connectMachineShare({
 		appUrl,
 		sessionToken: session.value.sessionToken,
@@ -1622,7 +1624,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 	});
 	const extra = (argv.print ?? "").trim();
 	const prompt = buildImportSeedPrompt(process.cwd(), machineOsFromPlatform(process.platform)) + (extra ? `\n\nAdditional instructions: ${extra}` : "");
-	const { runPrint } = await import("./print-DACzRUwQ.mjs");
+	const { runPrint } = await import("./print-B9djx8GU.mjs");
 	try {
 		const result = await runPrint({
 			appUrl,
@@ -1646,7 +1648,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 
 //#endregion
 //#region src/commands/keys.ts
-const listCommand$4 = {
+const listCommand$5 = {
 	command: "list",
 	describe: "List API keys for an agent",
 	handler: async (argv) => {
@@ -1735,7 +1737,7 @@ const keysCommand = {
 		type: "string",
 		demandOption: true,
 		describe: "Agent ID"
-	}).command(listCommand$4).command(createCommand).command(revokeCommand$1).demandCommand(1, "Specify a subcommand: list, create, revoke"),
+	}).command(listCommand$5).command(createCommand).command(revokeCommand$1).demandCommand(1, "Specify a subcommand: list, create, revoke"),
 	handler: () => {}
 };
 
@@ -1747,7 +1749,7 @@ async function readStdin() {
 	for await (const chunk of process.stdin) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
 	return Buffer.concat(chunks).toString("utf8").replace(/\n$/, "");
 }
-const listCommand$3 = {
+const listCommand$4 = {
 	command: "list",
 	describe: "List secret names for an agent (values are never shown)",
 	handler: async (argv) => {
@@ -1833,7 +1835,7 @@ const secretsCommand = {
 		type: "string",
 		demandOption: true,
 		describe: "Agent ID"
-	}).command(listCommand$3).command(setCommand$1).command(rmCommand).demandCommand(1, "Specify a subcommand: list, set, rm"),
+	}).command(listCommand$4).command(setCommand$1).command(rmCommand).demandCommand(1, "Specify a subcommand: list, set, rm"),
 	handler: () => {}
 };
 
@@ -2029,7 +2031,7 @@ const chatCommand = {
 			sessionToken: auth.value.token,
 			agentSelector: argv.agent ?? null
 		});
-		const { runChat } = await import("./boot-iaVSnd7h.mjs");
+		const { runChat } = await import("./boot-C5HJfwRS.mjs");
 		await runChat({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -2113,7 +2115,7 @@ async function runPrintMode({ argv, appUrl }) {
 		printError(`${auth.error.message} For non-interactive use, run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { runPrint, readStdin } = await import("./print-DACzRUwQ.mjs");
+	const { runPrint, readStdin } = await import("./print-B9djx8GU.mjs");
 	const workspaceId = await resolveWorkspaceFlag({
 		appUrl,
 		sessionToken: auth.value.token,
@@ -2143,7 +2145,7 @@ async function runPrintMode({ argv, appUrl }) {
 			process.exit(1);
 		}
 	} else {
-		const { connectMachineShare } = await import("./print-share-BH9gvCls.mjs");
+		const { connectMachineShare } = await import("./print-share-BBy3OTno.mjs");
 		machineShare = await connectMachineShare({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -2164,7 +2166,7 @@ async function runPrintMode({ argv, appUrl }) {
 		});
 		if (argv.json) output(argv, result);
 	} catch (error) {
-		const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-Dgu5-oDy.mjs");
+		const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-SE6tySLd.mjs");
 		if (error instanceof BillingBlockedError) {
 			if (argv.json) output(argv, billingBlockedJsonResult(error, null));
 			printError(error.message);
@@ -2208,7 +2210,7 @@ const getCommand$1 = {
 			printError(`${auth.error.message} Run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 			process.exit(1);
 		}
-		const { messageGet } = await import("./print-DACzRUwQ.mjs");
+		const { messageGet } = await import("./print-B9djx8GU.mjs");
 		try {
 			const result = await messageGet({
 				appUrl: auth.value.appUrl,
@@ -2218,7 +2220,7 @@ const getCommand$1 = {
 			});
 			if (argv.json) output(argv, result);
 		} catch (error) {
-			const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-Dgu5-oDy.mjs");
+			const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-SE6tySLd.mjs");
 			if (error instanceof BillingBlockedError) {
 				if (argv.json) output(argv, billingBlockedJsonResult(error, argv["message-id"]));
 				printError(error.message);
@@ -2255,7 +2257,7 @@ function messageToText(message) {
 	}
 	return chunks.join("\n").trim();
 }
-const listCommand$2 = {
+const listCommand$3 = {
 	command: "list",
 	describe: "List an agent's conversations",
 	builder: (y) => y.option("agent", {
@@ -2345,7 +2347,7 @@ const conversationsCommand = {
 	command: "conversations",
 	aliases: ["conv"],
 	describe: "List and read agent conversations",
-	builder: (y) => y.command(listCommand$2).command(showCommand).demandCommand(1, "Specify a subcommand: list, show"),
+	builder: (y) => y.command(listCommand$3).command(showCommand).demandCommand(1, "Specify a subcommand: list, show"),
 	handler: () => {}
 };
 
@@ -2387,7 +2389,7 @@ async function runList(argv, { hint }) {
 	]));
 	if (hint && !argv.quiet) console.log("\nRun `skydive workspace switch` to pick a workspace, or pass its slug directly.");
 }
-const listCommand$1 = {
+const listCommand$2 = {
 	command: "list",
 	describe: "List workspaces on your account",
 	handler: (argv) => runList(argv, { hint: false })
@@ -2411,7 +2413,7 @@ const switchCommand = {
 				printError("The workspace picker needs the Bun runtime and it could not be set up automatically. Pass a workspace slug instead, or install Bun and retry.");
 				process.exit(1);
 			}
-			const { runWorkspacePicker } = await import("./boot-iaVSnd7h.mjs");
+			const { runWorkspacePicker } = await import("./boot-C5HJfwRS.mjs");
 			await runWorkspacePicker(session);
 			return;
 		}
@@ -2444,7 +2446,7 @@ const switchCommand = {
 const workspaceCommand = {
 	command: "workspace",
 	describe: "List or switch the workspace all `skydive` commands act on",
-	builder: (y) => y.command(listCommand$1).command(switchCommand),
+	builder: (y) => y.command(listCommand$2).command(switchCommand),
 	handler: (argv) => runList(argv, { hint: true })
 };
 
@@ -2490,7 +2492,7 @@ const openCommand = {
 		const agent = argv.agent ? resolveAgent$1((await fetchPortalDevices(session)).agents, argv.agent) : null;
 		const cwd = argv.cwd ? path.resolve(argv.cwd) : process.cwd();
 		const { machineName } = await resolveMachineIdentity(null);
-		const { PortalDaemonClient } = await import("./daemon-client-C7emKKlj.mjs");
+		const { PortalDaemonClient } = await import("./daemon-client-DTfIza0O.mjs");
 		let lastLine = "";
 		let signalConnected;
 		const connected = new Promise((resolve) => {
@@ -2736,15 +2738,19 @@ const forwardCommand = {
 		const agent = resolveAgent$1((await fetchPortalDevices(session)).agents, argv.agent ?? null);
 		const targetPort = argv.port;
 		const localPort = argv["local-port"] ?? targetPort;
-		const { startForward } = await import("./forward-DL6DYqyc.mjs");
+		const { startForward } = await import("./forward-zwB55Bls.mjs");
+		const { defaultTlsCertSource } = await import("./tls-cert-CLgSQALB.mjs");
+		const log = (msg) => console.error(msg);
 		const listener = await startForward({
 			auth: session,
 			agentId: agent.id,
 			localPort,
 			targetPort,
-			log: (msg) => console.error(msg)
+			tlsCertSource: defaultTlsCertSource(process.env, log),
+			log
 		});
 		console.log(`Forwarding http://localhost:${listener.port} -> ${agent.name}'s sandbox port ${targetPort}. ctrl+c to stop.`);
+		if (listener.tls) console.log(`           https://${listener.tls.hostname}:${listener.tls.port} (TLS — browsers negotiate HTTP/2 here, which loads module-heavy dev servers much faster)`);
 		await new Promise((resolve) => {
 			process.once("SIGINT", () => resolve());
 			process.once("SIGTERM", () => resolve());
@@ -2800,8 +2806,8 @@ const sandboxCommand = {
 	}).example("skydive sandbox --agent grace", "Live terminal (Ctrl-] detaches)").example("skydive sandbox --agent grace -- tail -n 50 /tmp/harness.log", "One-shot command (use `--` so its flags reach the sandbox)").example("skydive sandbox --agent grace -- sh -c 'ls /tmp | wc -l'", "Shell features go through an explicit `sh -c`"),
 	handler: async (argv) => {
 		const session = requireSession(argv);
-		const { createRestClient } = await import("./rest-VV5nc-Mn.mjs");
-		const { resolveAgent } = await import("./print-DACzRUwQ.mjs");
+		const { createRestClient } = await import("./rest-CaWUSrnH.mjs");
+		const { resolveAgent } = await import("./print-B9djx8GU.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken
@@ -2870,7 +2876,7 @@ async function runPty({ session, agentId, agentName }) {
 		return 1;
 	}
 	console.error(`Connecting to ${agentName}'s sandbox… (Ctrl-] detaches)`);
-	const { runRawPtyPassthrough } = await import("./raw-pty-DmdUf4_w.mjs");
+	const { runRawPtyPassthrough } = await import("./raw-pty-g3kATVQe.mjs");
 	const result = await runRawPtyPassthrough({
 		stdin: process.stdin,
 		stdout: process.stdout,
@@ -2958,8 +2964,8 @@ const fsEditCommand = {
 	handler: async (argv) => {
 		const session = requireSession(argv);
 		const remotePath = argv.path;
-		const { createRestClient } = await import("./rest-VV5nc-Mn.mjs");
-		const { resolveAgent } = await import("./print-DACzRUwQ.mjs");
+		const { createRestClient } = await import("./rest-CaWUSrnH.mjs");
+		const { resolveAgent } = await import("./print-B9djx8GU.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken
@@ -3854,7 +3860,7 @@ function snapshot(pref) {
 		describe: pref.describe
 	};
 }
-const listCommand = {
+const listCommand$1 = {
 	command: "list",
 	aliases: ["ls"],
 	describe: "Show every editable preference, its value, and its source",
@@ -3945,7 +3951,7 @@ const unsetCommand = {
 		}
 	}
 };
-const pathCommand = {
+const pathCommand$1 = {
 	command: "path",
 	describe: "Print the on-disk config file path",
 	handler: (argv) => {
@@ -3959,14 +3965,172 @@ const pathCommand = {
 const configCommand = {
 	command: "config",
 	describe: "View and set CLI preferences (safe, hand-editable keys only)",
-	builder: (y) => y.command(listCommand).command(getCommand).command(setCommand).command(unsetCommand).command(pathCommand),
+	builder: (y) => y.command(listCommand$1).command(getCommand).command(setCommand).command(unsetCommand).command(pathCommand$1),
+	handler: (argv) => listCommand$1.handler(argv)
+};
+
+//#endregion
+//#region src/commands/logs.ts
+const ISSUE_REPOSITORY_URL = "https://github.com/Create-Inc/skydive-cli";
+function issueUrl(archivePath) {
+	const url = new URL(`${ISSUE_REPOSITORY_URL}/issues/new`);
+	url.searchParams.set("title", "CLI issue: ");
+	url.searchParams.set("body", [
+		"## What happened?",
+		"",
+		"<!-- Tell us what you were doing and what went wrong. -->",
+		"",
+		"## Diagnostics",
+		"",
+		`Please attach \`${path.basename(archivePath)}\` to this issue.`
+	].join("\n"));
+	return url.toString();
+}
+async function listLogSessions(activeSessionPath = profileDir()) {
+	const root = getAutomaticLogsDir();
+	try {
+		const entries = await fs.promises.readdir(root, { withFileTypes: true });
+		return (await Promise.all(entries.filter((entry) => entry.isDirectory() && path.join(root, entry.name) !== activeSessionPath).map(async (entry) => {
+			const sessionPath = path.join(root, entry.name);
+			return {
+				name: entry.name,
+				path: sessionPath,
+				modifiedAt: (await fs.promises.stat(sessionPath)).mtime.toISOString()
+			};
+		}))).sort((a, b) => b.name.localeCompare(a.name));
+	} catch (_error) {
+		return [];
+	}
+}
+async function resolveSession(name) {
+	const sessions = await listLogSessions();
+	const session = name ? sessions.find((candidate) => candidate.name === name) : sessions[0];
+	if (session) return session;
+	printError(name ? `Log session "${name}" was not found. Run \`skydive logs list\`.` : "No diagnostic logs found yet.");
+	process.exit(1);
+}
+async function offerIssueReport(archivePath) {
+	if (!process.stdin.isTTY || !process.stdout.isTTY) {
+		console.log(`Report an issue: ${ISSUE_REPOSITORY_URL}`);
+		return;
+	}
+	const prompt = createInterface$1({
+		input: process.stdin,
+		output: process.stdout
+	});
+	try {
+		if ((await prompt.question("Open a prefilled GitHub issue in your browser? [Y/n] ")).trim().toLowerCase() === "n") {
+			console.log(`File an issue: ${ISSUE_REPOSITORY_URL}`);
+			return;
+		}
+		await open(issueUrl(archivePath));
+		console.log(`Attach the diagnostics archive: ${archivePath}`);
+	} finally {
+		prompt.close();
+	}
+}
+async function createArchive(source, destination) {
+	await new Promise((resolve, reject) => {
+		const child = spawn("tar", [
+			"-czf",
+			destination,
+			"-C",
+			path.dirname(source),
+			path.basename(source)
+		], { stdio: [
+			"ignore",
+			"ignore",
+			"pipe"
+		] });
+		const stderr = [];
+		child.stderr.on("data", (chunk) => stderr.push(chunk));
+		child.once("error", reject);
+		child.once("close", (code) => {
+			if (code === 0) {
+				resolve();
+				return;
+			}
+			reject(new Error(Buffer.concat(stderr).toString("utf8").trim() || "Could not archive logs."));
+		});
+	});
+}
+const listCommand = {
+	command: "list",
+	aliases: ["ls"],
+	describe: "List recent diagnostic sessions",
+	handler: async (argv) => {
+		const sessions = await listLogSessions();
+		if (argv.json) {
+			output(argv, sessions);
+			return;
+		}
+		if (sessions.length === 0) {
+			console.log("No diagnostic logs found yet.");
+			return;
+		}
+		printTable(["Session", "Modified"], sessions.map((session) => [session.name, session.modifiedAt]));
+	}
+};
+const pathCommand = {
+	command: "path [session]",
+	describe: "Print a diagnostic session directory (latest by default)",
+	builder: (y) => y.positional("session", {
+		type: "string",
+		describe: "Session name from `skydive logs list`"
+	}),
+	handler: async (argv) => {
+		const session = await resolveSession(argv.session);
+		if (argv.json) {
+			output(argv, session);
+			return;
+		}
+		console.log(session.path);
+	}
+};
+const exportCommand = {
+	command: "export [session]",
+	describe: "Archive a diagnostic session for sharing (latest by default)",
+	builder: (y) => y.positional("session", {
+		type: "string",
+		describe: "Session name from `skydive logs list`"
+	}).option("output", {
+		alias: "o",
+		type: "string",
+		describe: "Archive path (defaults to the current directory)"
+	}),
+	handler: async (argv) => {
+		const session = await resolveSession(argv.session);
+		const destination = path.resolve(argv.output ?? `skydive-logs-${session.name}.tar.gz`);
+		try {
+			await createArchive(session.path, destination);
+		} catch (error) {
+			printError(error instanceof Error ? error.message : String(error));
+			process.exit(1);
+		}
+		if (argv.json) {
+			output(argv, {
+				path: destination,
+				session: session.name,
+				issueUrl: issueUrl(destination),
+				repositoryUrl: ISSUE_REPOSITORY_URL
+			});
+			return;
+		}
+		console.log(destination);
+		await offerIssueReport(destination);
+	}
+};
+const logsCommand = {
+	command: "logs",
+	describe: "Find and export recent local diagnostic logs",
+	builder: (y) => y.command(listCommand).command(pathCommand).command(exportCommand),
 	handler: (argv) => listCommand.handler(argv)
 };
 
 //#endregion
 //#region src/cli.ts
 function createCli(argv) {
-	return yargs(argv).scriptName("skydive").usage("$0 <command> [options]").parserConfiguration({ "populate--": true }).example("skydive auth login", "Store your API key").example("skydive chat", "Open the interactive chat TUI (prod)").example("skydive chat --api-url http://localhost:4500", "Chat against a local dev API").example("skydive agents list", "List your agents").example("skydive completion install", "Set up TAB completion for your shell").example("skydive keys create \"my-key\"", "Create an API key").example("skydive secrets set OPENAI_API_KEY --agent-id <id>", "Set a secret (value from stdin)").example("skydive workspace list", "List workspaces on your account").example("skydive config set updateCheck false", "Disable the daily update check").example("skydive workspace switch acme-team", "Switch the workspace all `skydive` commands act on").example("skydive portal open --agent grace", "Open the portal to this machine for an agent, headless (no TUI)").example("skydive fs edit --agent grace /tmp/notes.md", "Edit a file on the agent's computer with your local editor").option("json", {
+	return yargs(argv).scriptName("skydive").usage("$0 <command> [options]").parserConfiguration({ "populate--": true }).example("skydive auth login", "Store your API key").example("skydive chat", "Open the interactive chat TUI (prod)").example("skydive chat --api-url http://localhost:4500", "Chat against a local dev API").example("skydive agents list", "List your agents").example("skydive completion install", "Set up TAB completion for your shell").example("skydive keys create \"my-key\"", "Create an API key").example("skydive secrets set OPENAI_API_KEY --agent-id <id>", "Set a secret (value from stdin)").example("skydive workspace list", "List workspaces on your account").example("skydive config set updateCheck false", "Disable the daily update check").example("skydive logs export", "Archive the latest local diagnostics for sharing").example("skydive workspace switch acme-team", "Switch the workspace all `skydive` commands act on").example("skydive portal open --agent grace", "Open the portal to this machine for an agent, headless (no TUI)").example("skydive fs edit --agent grace /tmp/notes.md", "Edit a file on the agent's computer with your local editor").option("json", {
 		type: "boolean",
 		default: false,
 		global: true,
@@ -3980,7 +4144,7 @@ function createCli(argv) {
 		type: "string",
 		global: true,
 		describe: "Override API base URL"
-	}).command(authCommand).command(chatCommand).command(messagesCommand).command(conversationsCommand).command(agentsCommand).command(importCommand).command(keysCommand).command(secretsCommand).command(workspaceCommand).command(portalCommand).command(sandboxCommand).command(fsCommand).command(updateCommand).command(configCommand).command(completionCommand).demandCommand(1, "Specify a command. Run --help for usage.").strict().wrap(null).version(version).alias("v", "version").alias("h", "help").help().fail((msg, err) => {
+	}).command(authCommand).command(chatCommand).command(messagesCommand).command(conversationsCommand).command(agentsCommand).command(importCommand).command(keysCommand).command(secretsCommand).command(workspaceCommand).command(portalCommand).command(sandboxCommand).command(fsCommand).command(updateCommand).command(configCommand).command(logsCommand).command(completionCommand).demandCommand(1, "Specify a command. Run --help for usage.").strict().wrap(null).version(version).alias("v", "version").alias("h", "help").help().fail((msg, err) => {
 		printError(err ? err instanceof Error ? err.message : String(err) : msg ?? "Unknown error");
 		process.exit(1);
 	});
@@ -4336,7 +4500,7 @@ if (process.argv.includes(UPDATE_WORKER_FLAG)) {
 	process.exit(0);
 }
 if (process.argv.includes(PORTAL_DAEMON_FLAG)) {
-	const { runPortalDaemon } = await import("./daemon-SPQgtsbW.mjs");
+	const { runPortalDaemon } = await import("./daemon-WQ8QYrFt.mjs");
 	runPortalDaemon(process.argv);
 } else runCli();
 function runCli() {

package/dist/js/{boot-iaVSnd7h.mjs → boot-C5HJfwRS.mjs}

@@ -1,15 +1,16 @@
 #!/usr/bin/env node
-import { A as takenAliasNames, C as themesForMode, D as dedupeAliasName, E as aliasActivationHint, F as getActiveWorkspaceId, L as listWorkspaces, N as detectShell, O as installAgentAlias, T as machineOsFromPlatform, _ as theme, a as installCrashHandler, b as themeModeFromColorFgBg, c as MARK_CELLS, d as splashFitsWidth, f as DEFAULT_THEME_ID, g as noColorRequested, h as monoTheme, i as writeArtifact, k as slugifyAliasName, l as WORDMARK, m as findTheme, n as profilingEnabled, o as buildCrashReport, p as applyTheme, r as record, s as writeCrashReport, v as themeForMode, x as themeVersion, y as themeMode, z as setActiveWorkspace } from "./profiler-BVbYs_Yg.mjs";
-import { B as resolveWebUrl, C as getConfigPath, O as getReviewStateDir, P as recordDefaultAgent, U as saveTheme, b as DEFAULT_APP_URL, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, h as specKeyFor, i as resolveAgent, k as getSavedTheme, l as parseExternalOauthConnectParams, m as parseConnectCard, p as computeSettledLabel, s as MASK_CHAR, u as parseOauthConnectParams, y as DEFAULT_API_URL } from "./print-C_TnQSPg.mjs";
-import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
-import { a as isRecord, i as errorMessage, n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-CgfbKXst.mjs";
-import { i as billingBlockedOutcomeFromSendResponse } from "./billing-blocked-2wju4gC_.mjs";
-import { t as PortalClient } from "./client-DbqRBquD.mjs";
-import "./daemon-BTyg329O.mjs";
-import "./api-DG5W6iwx.mjs";
-import { t as SandboxStream } from "./client-c4c5MmgN.mjs";
-import { t as PortalDaemonClient } from "./daemon-client--A_yMKq6.mjs";
-import { t as runRawPtyPassthrough } from "./raw-pty-DY4KelZW.mjs";
+import { A as installAgentAlias, C as themeVersion, D as machineOsFromPlatform, F as detectShell, L as getActiveWorkspaceId, M as takenAliasNames, O as aliasActivationHint, S as themeModeFromColorFgBg, T as themesForMode, V as setActiveWorkspace, _ as monoTheme, a as WORDMARK, b as themeForMode, d as profilingEnabled, f as record, g as findTheme, h as applyTheme, i as MARK_CELLS, j as slugifyAliasName, k as dedupeAliasName, m as DEFAULT_THEME_ID, n as buildCrashReport, p as writeArtifact, r as writeCrashReport, s as splashFitsWidth, t as installCrashHandler, v as noColorRequested, x as themeMode, y as theme, z as listWorkspaces } from "./install-BPUAm8bS.mjs";
+import { B as resolveWebUrl, C as getConfigPath, O as getReviewStateDir, P as recordDefaultAgent, U as saveTheme, b as DEFAULT_APP_URL, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, h as specKeyFor, i as resolveAgent, k as getSavedTheme, l as parseExternalOauthConnectParams, m as parseConnectCard, p as computeSettledLabel, s as MASK_CHAR, u as parseOauthConnectParams, y as DEFAULT_API_URL } from "./print-Clgq46GU.mjs";
+import { t as HttpError } from "./http-error-UHH3mVBF.mjs";
+import { a as isRecord, i as errorMessage, n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-C6E4mS2A.mjs";
+import { i as billingBlockedOutcomeFromSendResponse } from "./billing-blocked-D3l5kJlX.mjs";
+import { t as PortalClient } from "./client-d6K9qm6B.mjs";
+import "./daemon-BPGZufS1.mjs";
+import { t as defaultTlsCertSource } from "./tls-cert-CV-pwxVN.mjs";
+import "./api-DQCaztBg.mjs";
+import { t as SandboxStream } from "./client-BTQ1fwzM.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-MpAGVkqP.mjs";
+import { t as runRawPtyPassthrough } from "./raw-pty-B9Bue8gg.mjs";
 import * as os$1 from "node:os";
 import { homedir, platform, release, tmpdir } from "node:os";
 import path, { basename, extname, isAbsolute, join, win32 } from "node:path";
@@ -396,6 +397,9 @@ function createPortalClient(opts) {
 				deviceToken: null
 			}),
 			resolveCwd: () => process.cwd(),
+			tlsCertSource: defaultTlsCertSource(process.env, (msg) => {
+				console.error(msg);
+			}),
 			persistedMachineName: null,
 			onMachineName: () => {},
 			onState: (state) => opts.onState({
@@ -14140,9 +14144,8 @@ async function settleBootThemeMode({ source, applyThemeMode, graceMs = THEME_QUE
 //#endregion
 //#region src/profiling/tui.ts
 /**
-* TUI-side profiling instrumentation. Everything here rides on the shared
-* profile directory created in bin.ts (see profiler.ts) and is inert unless
-* SKYDIVE_PROFILE is set.
+* TUI-side diagnostics. Everything here rides on the shared session directory
+* created in bin.ts. SKYDIVE_PROFILE=0 makes these helpers inert.
 */
 /**
 * Renderer options to merge into createCliRenderer when profiling:

package/dist/js/chunk-BbwQpWto.mjs

@@ -0,0 +1,33 @@
+#!/usr/bin/env node
+import { createRequire } from "node:module";
+
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJSMin = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") {
+		for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+			key = keys[i];
+			if (!__hasOwnProp.call(to, key) && key !== except) {
+				__defProp(to, key, {
+					get: ((k) => from[k]).bind(null, key),
+					enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+				});
+			}
+		}
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+
+//#endregion
+export { __require as n, __toESM as r, __commonJSMin as t };