skydive-cli 0.5.0-beta.31 → 0.5.0-beta.33

package/dist/js/{forward-DL6DYqyc.mjs → forward-zwB55Bls.mjs}

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
-import { t as fetchForwardTarget } from "./api-DG5W6iwx.mjs";
+import { r as warnOnRebindProtection } from "./tls-cert-CV-pwxVN.mjs";
+import { l as startTlsForward, t as fetchForwardTarget } from "./api-DQCaztBg.mjs";
 import net from "node:net";
 import { WebSocket, createWebSocketStream } from "ws";
 
@@ -103,7 +104,7 @@ const MAX_POOL_SIZE = 16;
 * sandbox recycle just costs the next connection a cold-start wait rather
 * than invalidating the forward.
 */
-async function startForward({ auth, agentId, localPort, targetPort, log }) {
+async function startForward({ auth, agentId, localPort, targetPort, tlsCertSource, log }) {
 	let target = await fetchForwardTarget(auth, agentId);
 	let mintedAt = Date.now();
 	async function freshTarget() {
@@ -174,11 +175,31 @@ async function startForward({ auth, agentId, localPort, targetPort, log }) {
 		});
 	});
 	const addr = server.address();
+	const boundPort = addr && typeof addr === "object" ? addr.port : localPort;
+	let tls = null;
+	if (tlsCertSource) try {
+		const cert = await tlsCertSource();
+		if (cert) {
+			if (cert.hostname !== "localhost") await warnOnRebindProtection(cert.hostname, log);
+			tls = await startTlsForward({
+				cert,
+				localPort: boundPort,
+				targetPort,
+				acquireTunnel: async () => pool.take() ?? dialTunnel(),
+				log
+			});
+		}
+	} catch (err) {
+		log(`forward: TLS origin unavailable (${err instanceof Error ? err.message : String(err)}); continuing with http only`);
+	}
 	return {
-		port: addr && typeof addr === "object" ? addr.port : localPort,
+		port: boundPort,
+		tls,
 		close: () => new Promise((resolve) => {
 			pool.close();
-			server.close(() => resolve());
+			(tls ? tls.close() : Promise.resolve()).then(() => {
+				server.close(() => resolve());
+			});
 		})
 	};
 }

package/dist/js/{profiler-BVbYs_Yg.mjs → install-BPUAm8bS.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as getConfigPath } from "./print-C_TnQSPg.mjs";
+import { C as getConfigPath } from "./print-Clgq46GU.mjs";
 import os from "node:os";
 import path from "node:path";
 import { err, ok } from "neverthrow";
@@ -8,7 +8,7 @@ import fs from "node:fs";
 
 //#region package.json
 var name = "skydive-cli";
-var version$1 = "0.5.0-beta.31";
+var version$1 = "0.5.0-beta.33";
 
 //#endregion
 //#region src/auth/organization.ts
@@ -1050,6 +1050,277 @@ function applyTheme(def) {
 	version++;
 }
 
+//#endregion
+//#region src/profiling/profiler.ts
+/**
+* Session diagnostics. Every invocation records enough context to reconstruct
+* what happened after the fact. SKYDIVE_PROFILE can select a custom directory
+* or disable recording with `0`.
+*
+* Default sessions live under the CLI's system state directory. Explicit
+* profiles keep the original cwd/custom-path behavior and add a CPU profile.
+* Each directory is designed to be handed to an agent (or a human) and read
+* without special tooling:
+*
+*   network.ndjson   every fetch: method, url, status, timing, content type
+*   state.ndjson     TUI state transitions (screen changes, store updates)
+*   commits.ndjson   React commits: which subtree rendered, when, how long
+*   render.ndjson    OpenTUI renderer samples: fps, frame times, cells drawn
+*   render.json      final renderer stats dump (full frame-time series)
+*   cpu-<pid>.cpuprofile  V8 CPU profile (Node-run commands only)
+*   meta-<pid>.json  argv, versions, runtime, exit code, wall time
+*
+* Every ndjson event carries a wall-clock `t` (epoch ms) and `pid`, so
+* records from the Node parent and the Bun-re-exec'd chat TUI land in the
+* same files and stay correlatable on one clock. The profile directory is
+* created by the first process and shared with children through
+* SKYDIVE_PROFILE_DIR (the chat re-exec inherits the environment).
+*
+*/
+const ENV_FLAG = "SKYDIVE_PROFILE";
+const ENV_DIR = "SKYDIVE_PROFILE_DIR";
+const DEFAULT_SESSION_LIMIT = 20;
+let activeDir = null;
+let startedAtMs = 0;
+/**
+* Buffered event lines per stream, flushed asynchronously. Events are
+* appended to an in-memory buffer and written with fs.promises off the
+* hot path, so recording never blocks the TUI's event loop — high-rate
+* streams (React commits, renderer samples) stay cheap. Whatever is
+* still buffered when the process exits is drained synchronously in the
+* exit handler, where async I/O would never flush.
+*/
+const pendingLines = /* @__PURE__ */ new Map();
+let flushScheduled = false;
+let flushing = Promise.resolve();
+function drainBuffersSync() {
+	if (activeDir === null) return;
+	for (const [stream, lines] of pendingLines) {
+		if (lines.length === 0) continue;
+		pendingLines.set(stream, []);
+		try {
+			fs.appendFileSync(path.join(activeDir, `${stream}.ndjson`), lines.join("\n") + "\n");
+		} catch (_error) {}
+	}
+}
+function scheduleFlush() {
+	if (flushScheduled || activeDir === null) return;
+	flushScheduled = true;
+	setTimeout(() => {
+		flushScheduled = false;
+		flushing = flushing.then(async () => {
+			if (activeDir === null) return;
+			for (const [stream, lines] of pendingLines) {
+				if (lines.length === 0) continue;
+				pendingLines.set(stream, []);
+				try {
+					await fs.promises.appendFile(path.join(activeDir, `${stream}.ndjson`), lines.join("\n") + "\n");
+				} catch (_error) {}
+			}
+		});
+	}, 100).unref?.();
+}
+function profilingEnabled() {
+	return process.env[ENV_FLAG] !== "0";
+}
+function explicitProfilingEnabled() {
+	const value = process.env[ENV_FLAG];
+	return value !== void 0 && value !== "" && value !== "0";
+}
+function profileDir() {
+	return activeDir;
+}
+function automaticLogsDir(platform, env, home) {
+	const appName = env["SKYDIVE_CONFIG_NAME"] ?? "skydive";
+	if (platform === "darwin") return path.join(home, "Library", "Logs", appName);
+	if (platform === "linux") {
+		const stateHome = env["XDG_STATE_HOME"] || path.join(home, ".local", "state");
+		return path.join(stateHome, appName);
+	}
+	return path.join(path.dirname(getConfigPath()), "logs");
+}
+function getAutomaticLogsDir() {
+	return automaticLogsDir(process.platform, process.env, os.homedir());
+}
+function sanitizeToken(token) {
+	return token.replace(/[^a-zA-Z0-9_-]/g, "_").slice(0, 40);
+}
+function commandName(argv) {
+	return argv.find((arg) => !arg.startsWith("-")) ?? "chat";
+}
+function sessionName(argv) {
+	const command = commandName(argv);
+	return `${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").replace("T", "_").slice(0, 19)}-${sanitizeToken(command)}-${process.pid}`;
+}
+/**
+* Automatic logs retain command shape, not values. Positional arguments and
+* flag values can contain prompts, secrets, paths, and other private data.
+*/
+function safeAutomaticArgv(argv) {
+	return [commandName(argv), ...argv.filter((arg) => arg.startsWith("-")).map((arg) => arg.split("=", 1)[0] ?? arg)];
+}
+/** Keeps automatic diagnostics bounded without touching explicit profiles. */
+function pruneAutomaticSessions(root, activeSession) {
+	try {
+		const sessions = fs.readdirSync(root, { withFileTypes: true }).filter((entry) => entry.isDirectory() && entry.name !== activeSession).map((entry) => entry.name).sort().reverse();
+		for (const stale of sessions.slice(DEFAULT_SESSION_LIMIT - 1)) fs.rmSync(path.join(root, stale), {
+			recursive: true,
+			force: true
+		});
+	} catch (_error) {}
+}
+/**
+* Appends one event to a stream file. Buffered and written asynchronously
+* so recording never blocks the event loop; the exit handler drains any
+* remainder synchronously so abrupt exits still keep their events.
+*/
+function record(stream, event) {
+	if (activeDir === null) return;
+	const line = JSON.stringify({
+		t: Date.now(),
+		pid: process.pid,
+		...event
+	});
+	const lines = pendingLines.get(stream);
+	if (lines === void 0) pendingLines.set(stream, [line]);
+	else lines.push(line);
+	scheduleFlush();
+}
+/** Writes a JSON artifact (non-append) into the profile directory. */
+function writeArtifact(name, data) {
+	if (activeDir === null) return;
+	try {
+		fs.writeFileSync(path.join(activeDir, name), JSON.stringify(data, null, 2));
+	} catch (_error) {}
+}
+function safeAutomaticUrl(value) {
+	try {
+		const url = new URL(value);
+		for (const key of url.searchParams.keys()) url.searchParams.set(key, "<redacted>");
+		url.hash = "";
+		return url.href;
+	} catch (_error) {
+		return "<invalid-url>";
+	}
+}
+/**
+* Patches globalThis.fetch to record request timing. A wrapper (not
+* undici's diagnostics_channel) because chat re-execs under Bun, where
+* fetch is Bun-native and undici events never fire; the wrapper behaves
+* identically in both runtimes.
+*/
+function installFetchRecorder(explicit) {
+	const original = globalThis.fetch;
+	const wrapped = async (...args) => {
+		const [input, init] = args;
+		const url = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+		const method = init?.method ?? (input instanceof Request ? input.method : "GET");
+		const started = Date.now();
+		try {
+			const res = await original(...args);
+			const contentType = res.headers.get("content-type") ?? "";
+			record("network", {
+				method,
+				url: explicit ? url : safeAutomaticUrl(url),
+				status: res.status,
+				durationMs: Date.now() - started,
+				contentType,
+				streamed: contentType.includes("text/event-stream")
+			});
+			return res;
+		} catch (err) {
+			record("network", {
+				method,
+				url: explicit ? url : safeAutomaticUrl(url),
+				status: 0,
+				durationMs: Date.now() - started,
+				error: err instanceof Error ? err.message : String(err)
+			});
+			throw err;
+		}
+	};
+	globalThis.fetch = Object.assign(wrapped, original);
+}
+function isBunRuntime() {
+	return typeof process !== "undefined" && "bun" in process.versions;
+}
+/**
+* Starts the V8 CPU profiler via node:inspector. Node-run commands only —
+* Bun does not implement the inspector Profiler domain, so the chat TUI
+* skips this artifact.
+*/
+function startCpuProfile() {
+	if (isBunRuntime()) return;
+	(async () => {
+		try {
+			const { Session } = await import("node:inspector/promises");
+			const session = new Session();
+			session.connect();
+			await session.post("Profiler.enable");
+			await session.post("Profiler.start");
+			process.once("beforeExit", () => {
+				(async () => {
+					try {
+						const { profile } = await session.post("Profiler.stop");
+						writeArtifact(`cpu-${process.pid}.cpuprofile`, profile);
+						session.disconnect();
+					} catch (_error) {}
+				})();
+			});
+		} catch (_error) {}
+	})();
+}
+/**
+* Starts diagnostics unless SKYDIVE_PROFILE=0. Creates a system-state session
+* directory (or joins the one a parent process created), patches fetch, and
+* registers the exit-time metadata dump. Explicit profiles also capture CPU.
+*/
+function maybeStartProfiling(argv, cliVersion) {
+	if (!profilingEnabled() || activeDir !== null) return;
+	const inherited = process.env[ENV_DIR];
+	const explicit = explicitProfilingEnabled();
+	let automaticRoot = null;
+	let automaticSession = null;
+	if (inherited !== void 0 && inherited !== "") activeDir = inherited;
+	else if (explicit) {
+		const flagValue = process.env[ENV_FLAG] ?? "1";
+		activeDir = flagValue === "1" || flagValue.toLowerCase() === "true" ? path.resolve(process.cwd(), `skydive-profile-${sessionName(argv)}`) : path.resolve(process.cwd(), flagValue);
+		process.env[ENV_DIR] = activeDir;
+	} else {
+		automaticRoot = getAutomaticLogsDir();
+		automaticSession = sessionName(argv);
+		activeDir = path.join(automaticRoot, automaticSession);
+		process.env[ENV_DIR] = activeDir;
+	}
+	try {
+		fs.mkdirSync(activeDir, {
+			recursive: true,
+			mode: 448
+		});
+		if (automaticRoot !== null && automaticSession !== null) pruneAutomaticSessions(automaticRoot, automaticSession);
+	} catch (_error) {
+		activeDir = null;
+		return;
+	}
+	startedAtMs = Date.now();
+	installFetchRecorder(explicit);
+	if (explicit) startCpuProfile();
+	process.on("exit", (code) => {
+		drainBuffersSync();
+		writeArtifact(`meta-${process.pid}.json`, {
+			argv: explicit ? argv : safeAutomaticArgv(argv),
+			cliVersion,
+			runtime: isBunRuntime() ? `bun ${process.versions["bun"]}` : `node ${process.version}`,
+			platform: process.platform,
+			pid: process.pid,
+			exitCode: code,
+			startedAt: new Date(startedAtMs).toISOString(),
+			wallTimeMs: Date.now() - startedAtMs
+		});
+		if (explicit && process.env[ENV_DIR] === activeDir && inherited === void 0) process.stderr.write(`\nprofile written to ${activeDir}\n`);
+	});
+}
+
 //#endregion
 //#region src/brand.ts
 const MARK_CELLS = [
@@ -1311,211 +1582,4 @@ function printFatalNotice(file, memory) {
 }
 
 //#endregion
-//#region src/profiling/profiler.ts
-/**
-* Opt-in session profiling. When SKYDIVE_PROFILE is set, an invocation
-* records everything needed to reconstruct what happened performance-wise —
-* designed so the whole directory can be handed to an agent (or a human)
-* and read without special tooling:
-*
-*   network.ndjson   every fetch: method, url, status, timing, content type
-*   state.ndjson     TUI state transitions (screen changes, store updates)
-*   commits.ndjson   React commits: which subtree rendered, when, how long
-*   render.ndjson    OpenTUI renderer samples: fps, frame times, cells drawn
-*   render.json      final renderer stats dump (full frame-time series)
-*   cpu-<pid>.cpuprofile  V8 CPU profile (Node-run commands only)
-*   meta-<pid>.json  argv, versions, runtime, exit code, wall time
-*
-* Every ndjson event carries a wall-clock `t` (epoch ms) and `pid`, so
-* records from the Node parent and the Bun-re-exec'd chat TUI land in the
-* same files and stay correlatable on one clock. The profile directory is
-* created by the first process and shared with children through
-* SKYDIVE_PROFILE_DIR (the chat re-exec inherits the environment).
-*
-* Inert unless SKYDIVE_PROFILE is set: no patched fetch, no subscriptions,
-* no inspector session.
-*/
-const ENV_FLAG = "SKYDIVE_PROFILE";
-const ENV_DIR = "SKYDIVE_PROFILE_DIR";
-let activeDir = null;
-let startedAtMs = 0;
-/**
-* Buffered event lines per stream, flushed asynchronously. Events are
-* appended to an in-memory buffer and written with fs.promises off the
-* hot path, so recording never blocks the TUI's event loop — high-rate
-* streams (React commits, renderer samples) stay cheap. Whatever is
-* still buffered when the process exits is drained synchronously in the
-* exit handler, where async I/O would never flush.
-*/
-const pendingLines = /* @__PURE__ */ new Map();
-let flushScheduled = false;
-let flushing = Promise.resolve();
-function drainBuffersSync() {
-	if (activeDir === null) return;
-	for (const [stream, lines] of pendingLines) {
-		if (lines.length === 0) continue;
-		pendingLines.set(stream, []);
-		try {
-			fs.appendFileSync(path.join(activeDir, `${stream}.ndjson`), lines.join("\n") + "\n");
-		} catch (_error) {}
-	}
-}
-function scheduleFlush() {
-	if (flushScheduled || activeDir === null) return;
-	flushScheduled = true;
-	setTimeout(() => {
-		flushScheduled = false;
-		flushing = flushing.then(async () => {
-			if (activeDir === null) return;
-			for (const [stream, lines] of pendingLines) {
-				if (lines.length === 0) continue;
-				pendingLines.set(stream, []);
-				try {
-					await fs.promises.appendFile(path.join(activeDir, `${stream}.ndjson`), lines.join("\n") + "\n");
-				} catch (_error) {}
-			}
-		});
-	}, 100).unref?.();
-}
-function profilingEnabled() {
-	const v = process.env[ENV_FLAG];
-	return v !== void 0 && v !== "" && v !== "0";
-}
-function sanitizeToken(token) {
-	return token.replace(/[^a-zA-Z0-9_-]/g, "_").slice(0, 40);
-}
-/**
-* Appends one event to a stream file. Buffered and written asynchronously
-* so recording never blocks the event loop; the exit handler drains any
-* remainder synchronously so abrupt exits still keep their events.
-*/
-function record(stream, event) {
-	if (activeDir === null) return;
-	const line = JSON.stringify({
-		t: Date.now(),
-		pid: process.pid,
-		...event
-	});
-	const lines = pendingLines.get(stream);
-	if (lines === void 0) pendingLines.set(stream, [line]);
-	else lines.push(line);
-	scheduleFlush();
-}
-/** Writes a JSON artifact (non-append) into the profile directory. */
-function writeArtifact(name, data) {
-	if (activeDir === null) return;
-	try {
-		fs.writeFileSync(path.join(activeDir, name), JSON.stringify(data, null, 2));
-	} catch (_error) {}
-}
-/**
-* Patches globalThis.fetch to record request timing. A wrapper (not
-* undici's diagnostics_channel) because chat re-execs under Bun, where
-* fetch is Bun-native and undici events never fire; the wrapper behaves
-* identically in both runtimes.
-*/
-function installFetchRecorder() {
-	const original = globalThis.fetch;
-	const wrapped = async (...args) => {
-		const [input, init] = args;
-		const url = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
-		const method = init?.method ?? (input instanceof Request ? input.method : "GET");
-		const started = Date.now();
-		try {
-			const res = await original(...args);
-			const contentType = res.headers.get("content-type") ?? "";
-			record("network", {
-				method,
-				url,
-				status: res.status,
-				durationMs: Date.now() - started,
-				contentType,
-				streamed: contentType.includes("text/event-stream")
-			});
-			return res;
-		} catch (err) {
-			record("network", {
-				method,
-				url,
-				status: 0,
-				durationMs: Date.now() - started,
-				error: err instanceof Error ? err.message : String(err)
-			});
-			throw err;
-		}
-	};
-	globalThis.fetch = Object.assign(wrapped, original);
-}
-function isBunRuntime() {
-	return typeof process !== "undefined" && "bun" in process.versions;
-}
-/**
-* Starts the V8 CPU profiler via node:inspector. Node-run commands only —
-* Bun does not implement the inspector Profiler domain, so the chat TUI
-* skips this artifact.
-*/
-function startCpuProfile() {
-	if (isBunRuntime()) return;
-	(async () => {
-		try {
-			const { Session } = await import("node:inspector/promises");
-			const session = new Session();
-			session.connect();
-			await session.post("Profiler.enable");
-			await session.post("Profiler.start");
-			process.once("beforeExit", () => {
-				(async () => {
-					try {
-						const { profile } = await session.post("Profiler.stop");
-						writeArtifact(`cpu-${process.pid}.cpuprofile`, profile);
-						session.disconnect();
-					} catch (_error) {}
-				})();
-			});
-		} catch (_error) {}
-	})();
-}
-/**
-* Activates profiling for this process if SKYDIVE_PROFILE is set. Creates
-* the profile directory (or joins the one a parent process created),
-* patches fetch, starts the CPU profiler, and registers the exit-time
-* meta dump. Call once, as early as possible.
-*/
-function maybeStartProfiling(argv, cliVersion) {
-	if (!profilingEnabled() || activeDir !== null) return;
-	const inherited = process.env[ENV_DIR];
-	if (inherited !== void 0 && inherited !== "") activeDir = inherited;
-	else {
-		const flagValue = process.env[ENV_FLAG] ?? "1";
-		const command = argv.find((a) => !a.startsWith("-")) ?? "chat";
-		const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").replace("T", "_").slice(0, 19);
-		activeDir = flagValue === "1" || flagValue.toLowerCase() === "true" ? path.resolve(process.cwd(), `skydive-profile-${sanitizeToken(command)}-${stamp}`) : path.resolve(process.cwd(), flagValue);
-		process.env[ENV_DIR] = activeDir;
-	}
-	try {
-		fs.mkdirSync(activeDir, { recursive: true });
-	} catch (_error) {
-		activeDir = null;
-		return;
-	}
-	startedAtMs = Date.now();
-	installFetchRecorder();
-	startCpuProfile();
-	process.on("exit", (code) => {
-		drainBuffersSync();
-		writeArtifact(`meta-${process.pid}.json`, {
-			argv,
-			cliVersion,
-			runtime: isBunRuntime() ? `bun ${process.versions["bun"]}` : `node ${process.version}`,
-			platform: process.platform,
-			pid: process.pid,
-			exitCode: code,
-			startedAt: new Date(startedAtMs).toISOString(),
-			wallTimeMs: Date.now() - startedAtMs
-		});
-		if (process.env[ENV_DIR] === activeDir && inherited === void 0) process.stderr.write(`\nprofile written to ${activeDir}\n`);
-	});
-}
-
-//#endregion
-export { takenAliasNames as A, name as B, themesForMode as C, dedupeAliasName as D, aliasActivationHint as E, getActiveWorkspaceId as F, getSessionIdentity as I, listWorkspaces as L, defaultInstallEnv as M, detectShell as N, installAgentAlias as O, ensureActiveOrganization as P, resolveWorkspaceId as R, themes as S, machineOsFromPlatform as T, version$1 as V, theme as _, installCrashHandler as a, themeModeFromColorFgBg as b, MARK_CELLS as c, splashFitsWidth as d, DEFAULT_THEME_ID as f, noColorRequested as g, monoTheme as h, writeArtifact as i, SUPPORTED_SHELLS as j, slugifyAliasName as k, WORDMARK as l, findTheme as m, profilingEnabled as n, buildCrashReport as o, applyTheme as p, record as r, writeCrashReport as s, maybeStartProfiling as t, brandHelpArt as u, themeForMode as v, buildImportSeedPrompt as w, themeVersion as x, themeMode as y, setActiveWorkspace as z };
+export { installAgentAlias as A, resolveWorkspaceId as B, themeVersion as C, machineOsFromPlatform as D, buildImportSeedPrompt as E, detectShell as F, name as H, ensureActiveOrganization as I, getActiveWorkspaceId as L, takenAliasNames as M, SUPPORTED_SHELLS as N, aliasActivationHint as O, defaultInstallEnv as P, getSessionIdentity as R, themeModeFromColorFgBg as S, themesForMode as T, version$1 as U, setActiveWorkspace as V, monoTheme as _, WORDMARK as a, themeForMode as b, getAutomaticLogsDir as c, profilingEnabled as d, record as f, findTheme as g, applyTheme as h, MARK_CELLS as i, slugifyAliasName as j, dedupeAliasName as k, maybeStartProfiling as l, DEFAULT_THEME_ID as m, buildCrashReport as n, brandHelpArt as o, writeArtifact as p, writeCrashReport as r, splashFitsWidth as s, installCrashHandler as t, profileDir as u, noColorRequested as v, themes as w, themeMode as x, theme as y, listWorkspaces as z };

package/dist/js/localhost-cert-Bn-UBUmj.mjs

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+import { r as __toESM } from "./chunk-BbwQpWto.mjs";
+import os from "node:os";
+import path from "node:path";
+import { mkdir, readFile, unlink, writeFile } from "node:fs/promises";
+
+//#region ../portal-daemon/src/localhost-cert.ts
+/**
+* Durable home for the one piece of state devcert doesn't keep for us: the
+* user's decision to skip automatic cert setup. The daemon's own state dir is
+* tmpdir-based (wiped on reboot), and re-raising a system trust prompt on
+* every `portal forward` after a decline is exactly the nagging that trains
+* people to fear the feature.
+*/
+function declineMarkerPath() {
+	return path.join(os.homedir(), ".config", "skydive-portal", "tls-declined");
+}
+async function hasDeclined() {
+	try {
+		await readFile(declineMarkerPath());
+		return true;
+	} catch (_error) {
+		return false;
+	}
+}
+async function recordDecline(reason) {
+	const marker = declineMarkerPath();
+	try {
+		await mkdir(path.dirname(marker), { recursive: true });
+		await writeFile(marker, `Automatic localhost TLS setup failed or was declined:\n${reason}\n\nDelete this file to let it try again.\n`);
+	} catch (_error) {}
+}
+/**
+* Fully automatic localhost cert: devcert generates a per-machine local CA on
+* first use, installs it into the system/browser trust stores (one OS-native
+* consent prompt, the mkcert pattern), signs a `localhost` leaf, and reuses
+* both silently on every later run. The private key never leaves the machine
+* and the CA is unique to it, so trusting it vouches only for this user's own
+* loopback.
+*
+* Every failure — the user declining the trust prompt included — degrades to
+* the plain-http origin (the product default) with one log line, and writes a
+* marker so subsequent runs don't nag. `resetLocalhostCertDecline` (or
+* deleting the marker file) re-arms it.
+*/
+function localhostCertSource(log) {
+	return async () => {
+		if (await hasDeclined()) return null;
+		try {
+			const { certificateFor } = await import("./dist-CRtjM7ba.mjs").then((m) => /* @__PURE__ */ __toESM(m.default, 1));
+			const { key, cert } = await certificateFor("localhost", { skipHostsFile: true });
+			return {
+				key: key.toString(),
+				cert: cert.toString(),
+				hostname: "localhost"
+			};
+		} catch (error) {
+			const reason = error instanceof Error ? error.message : String(error);
+			await recordDecline(reason);
+			log(`portal: automatic localhost TLS setup didn't complete (${reason}). Continuing with http only; delete ~/.config/skydive-portal/tls-declined to try again.`);
+			return null;
+		}
+	};
+}
+
+//#endregion
+export { localhostCertSource };

package/dist/js/{print-DACzRUwQ.mjs → print-B9djx8GU.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-C_TnQSPg.mjs";
-import "./rest-CgfbKXst.mjs";
-import "./billing-blocked-2wju4gC_.mjs";
+import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-Clgq46GU.mjs";
+import "./rest-C6E4mS2A.mjs";
+import "./billing-blocked-D3l5kJlX.mjs";
 
 export { messageGet, readStdin, resolveAgent, runPrint };

package/dist/js/{print-C_TnQSPg.mjs → print-Clgq46GU.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
-import { a as isRecord, i as errorMessage, r as sendErrorMessage, t as createRestClient } from "./rest-CgfbKXst.mjs";
-import { i as billingBlockedOutcomeFromSendResponse, n as BillingBlockedError } from "./billing-blocked-2wju4gC_.mjs";
+import { t as HttpError } from "./http-error-UHH3mVBF.mjs";
+import { a as isRecord, i as errorMessage, r as sendErrorMessage, t as createRestClient } from "./rest-C6E4mS2A.mjs";
+import { i as billingBlockedOutcomeFromSendResponse, n as BillingBlockedError } from "./billing-blocked-D3l5kJlX.mjs";
 import path from "node:path";
 import Conf from "conf";
 import { err, ok } from "neverthrow";

package/dist/js/{print-share-BH9gvCls.mjs → print-share-BBy3OTno.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { n as printError } from "./output-DYzzdXYV.mjs";
+import { n as printError } from "./output-wY0VQDea.mjs";
 
 //#region src/chat/print-share.ts
 /**
@@ -14,7 +14,8 @@ import { n as printError } from "./output-DYzzdXYV.mjs";
 * the reply (and to --json).
 */
 async function connectMachineShare({ appUrl, sessionToken, timeoutHint }) {
-	const { PortalClient } = await import("./client-hH2PJL8y.mjs");
+	const { PortalClient } = await import("./client-yz3zrpAS.mjs");
+	const { defaultTlsCertSource } = await import("./tls-cert-CLgSQALB.mjs");
 	let signalConnected;
 	const connected = new Promise((resolve) => {
 		signalConnected = resolve;
@@ -26,6 +27,9 @@ async function connectMachineShare({ appUrl, sessionToken, timeoutHint }) {
 			deviceToken: null
 		}),
 		resolveCwd: () => process.cwd(),
+		tlsCertSource: defaultTlsCertSource(process.env, (msg) => {
+			console.error(msg);
+		}),
 		persistedMachineName: null,
 		onMachineName: () => {},
 		onState: (state) => {

package/dist/js/{raw-pty-DY4KelZW.mjs → raw-pty-B9Bue8gg.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as SandboxStream } from "./client-c4c5MmgN.mjs";
+import { t as SandboxStream } from "./client-BTQ1fwzM.mjs";
 
 //#region src/chat/sandbox/raw-pty.ts
 /**

package/dist/js/raw-pty-g3kATVQe.mjs

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import "./client-BTQ1fwzM.mjs";
+import { t as runRawPtyPassthrough } from "./raw-pty-B9Bue8gg.mjs";
+
+export { runRawPtyPassthrough };