skydive-cli 0.5.0-beta.36 → 0.5.0-beta.41

package/CHANGELOG.md

@@ -15,7 +15,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - `/search` (alias `/find`) in the chat TUI — opens the conversation picker with its search field focused, so "find a conversation" has a discoverable command instead of being a feature you had to know the bare picker already had. Pass a query inline (`/search billing deep dive`) and the picker opens already narrowed to the matches; bare `/search` opens it ready for you to type. The search runs server-side across conversation titles, message bodies, and participant names, the same search the picker exposes.
 - First run in a workspace with no agents now sets you up automatically: instead of dropping you on an empty agent picker, `skydive` creates your first agent for you (with a suggested name and avatar, mirroring the web onboarding flow) and then offers to have it learn how you already work — reading the other coding agents set up on your machine (Claude Code, Cursor, Codex, and more), the same import that `skydive import` runs, with a plan shown first and credentials never copied. Decline and you go straight into the new agent's chat. You can replay this flow anytime with `skydive --onboarding` (or `SKYDIVE_FORCE_ONBOARDING=1`), even in a workspace that already has agents.
-- `/computer` (alias `/stats`) in the chat TUI — a snapshot of the agent's sandbox drawn as colored bar graphs: CPU, memory, and disk usage. Bars turn amber past 75%% and red past 90%% so a glance tells you whether the box is under pressure. The numbers come from the Skydive API (the same live resource sample the web computer view reads), not by connecting to the sandbox — so the card shows instantly, never waking or hanging on a box that isn't running: when the agent has no live sandbox it simply reads "no sandbox running". The card keeps itself current quietly (a slow background refresh, no flicker or "updating" chrome); only the most recent card refreshes, and it silently stops while you're scrolled up (no wasted polls on a card you're not looking at) and resumes at the bottom.
+- `/computer` in the chat TUI — a snapshot of the agent's sandbox drawn as colored bar graphs: CPU, memory, and disk usage. Bars turn amber past 75%% and red past 90%% so a glance tells you whether the box is under pressure. The numbers come from the Skydive API (the same live resource sample the web computer view reads), not by connecting to the sandbox — so the card shows instantly, never waking or hanging on a box that isn't running: when the agent has no live sandbox it simply reads "no sandbox running". The card keeps itself current quietly (a slow background refresh, no flicker or "updating" chrome); only the most recent card refreshes, and it silently stops while you're scrolled up (no wasted polls on a card you're not looking at) and resumes at the bottom.
+- `/computer restart` in the chat TUI — reboot the agent's sandbox from chat. It asks a `y`/`n` confirm first (the restart stops whatever run is going and brings up a fresh box), then enqueues the same restart the web "Restart" control does. Available to anyone with edit access to the agent; view-only members are told they can't.
 - `skydive fs` — a namespace for working with the files on an agent's computer (its sandbox) from your own machine. Its first subcommand, `skydive fs edit <path>`, reads a remote file down over the same relay `skydive sandbox` uses, opens it in your local editor (`$VISUAL`/`$EDITOR`, override with `--editor`, defaults to `vi`), and writes your changes back atomically when you save and close — so you can edit a remote file as if it were local without opening the chat TUI. A path that doesn't exist yet is created on save; no changes means nothing is written. Access is gated on EDIT permission for the agent, exactly like `skydive sandbox`. (A first-class `fs` relay channel and `skydive fs mount` land in follow-ups.)
 
 ## [0.4.0] - 2026-08-07

package/dist/js/bin.mjs

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
-import { A as installAgentAlias, B as resolveWorkspaceId, D as machineOsFromPlatform, E as buildImportSeedPrompt, F as detectShell, H as name, I as ensureActiveOrganization, L as getActiveWorkspaceId, M as takenAliasNames, N as SUPPORTED_SHELLS, O as aliasActivationHint, P as defaultInstallEnv, R as getSessionIdentity, U as version, V as setActiveWorkspace, c as getAutomaticLogsDir, j as slugifyAliasName, k as dedupeAliasName, l as maybeStartProfiling, o as brandHelpArt, t as installCrashHandler, u as profileDir, w as themes, z as listWorkspaces } from "./install-aZ751iYf.mjs";
-import { A as getShareMachineDefault, C as getConfigPath, D as getPromptHistoryPath, E as getPreference, F as resolveAppUrl, H as saveSession, I as resolveChatAuth, L as resolveConfig, M as getStoredApiKeyWorkspaceName, N as getUpdateCheckDisabled, R as resolveManagementAuth, S as deleteConfig, T as getLastSeenVersion, V as saveConfig, W as setLastSeenVersion, _ as API_KEY_FAMILY_PREFIX, g as API_KEYS_URL, i as resolveAgent$1, j as getStoredApiKeyId, v as API_KEY_PREFIX, w as getDefaultAgent, x as PREFERENCES, y as DEFAULT_API_URL, z as resolveSession$1 } from "./print-h22UbIfZ.mjs";
+import { A as installAgentAlias, B as resolveWorkspaceId, D as machineOsFromPlatform, E as buildImportSeedPrompt, F as detectShell, H as name, I as ensureActiveOrganization, L as getActiveWorkspaceId, M as takenAliasNames, N as SUPPORTED_SHELLS, O as aliasActivationHint, P as defaultInstallEnv, R as getSessionIdentity, U as version, V as setActiveWorkspace, c as getAutomaticLogsDir, j as slugifyAliasName, k as dedupeAliasName, l as maybeStartProfiling, o as brandHelpArt, t as installCrashHandler, u as profileDir, w as themes, z as listWorkspaces } from "./install-BkMcGVYS.mjs";
+import { A as getShareMachineDefault, C as getConfigPath, D as getPromptHistoryPath, E as getPreference, F as resolveAppUrl, H as saveSession, I as resolveChatAuth, L as resolveConfig, M as getStoredApiKeyWorkspaceName, N as getUpdateCheckDisabled, R as resolveManagementAuth, S as deleteConfig, T as getLastSeenVersion, V as saveConfig, W as setLastSeenVersion, _ as API_KEY_FAMILY_PREFIX, g as API_KEYS_URL, i as resolveAgent$1, j as getStoredApiKeyId, v as API_KEY_PREFIX, w as getDefaultAgent, x as PREFERENCES, y as DEFAULT_API_URL, z as resolveSession$1 } from "./print-CwbdwCeQ.mjs";
 import { n as printError, r as printTable, t as output } from "./output-wY0VQDea.mjs";
 import { t as HttpError } from "./http-error-UHH3mVBF.mjs";
-import { t as createRestClient } from "./rest-ClVPZquN.mjs";
+import { t as createRestClient } from "./rest-Bbe-RhMy.mjs";
 import "./billing-blocked-D3l5kJlX.mjs";
-import { r as resolveMachineIdentity } from "./client-d6K9qm6B.mjs";
-import { i as queryDaemonStatus, l as PORTAL_DAEMON_FLAG, n as ensureDaemonRunning, s as stopDaemon, u as daemonPaths } from "./daemon-CH95gDij.mjs";
+import { r as resolveMachineIdentity } from "./client-DMYwKALl.mjs";
+import { i as queryDaemonStatus, l as PORTAL_DAEMON_FLAG, n as ensureDaemonRunning, s as stopDaemon, u as daemonPaths } from "./daemon-D8WoX21I.mjs";
 import "./tls-cert-CV-pwxVN.mjs";
 import { i as grantPortalAccess, n as fetchPortalDevices, o as registerPortalDevice, r as findThisDevice, s as revokePortalAccess } from "./api-DQCaztBg.mjs";
 import { a as encodeFsRequest, i as decodeFsResponse, n as SANDBOX_STREAM_PATH, r as streamSpecToQuery, t as SandboxStream } from "./client-Btq6bMzX.mjs";
@@ -1586,7 +1586,7 @@ const importCommand = {
 				process.exit(1);
 			}
 		}
-		const { runChat } = await import("./boot-CmInaUwJ.mjs");
+		const { runChat } = await import("./boot-B1Y1D48W.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
@@ -1616,7 +1616,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 		printError(`${session.error.message} For non-interactive use, run \`skydive auth login --web\` first, or set SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { connectMachineShare } = await import("./print-share-BBy3OTno.mjs");
+	const { connectMachineShare } = await import("./print-share-azWHVxpt.mjs");
 	const machineShare = await connectMachineShare({
 		appUrl,
 		sessionToken: session.value.sessionToken,
@@ -1624,7 +1624,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 	});
 	const extra = (argv.print ?? "").trim();
 	const prompt = buildImportSeedPrompt(process.cwd(), machineOsFromPlatform(process.platform)) + (extra ? `\n\nAdditional instructions: ${extra}` : "");
-	const { runPrint } = await import("./print-DV9L41G2.mjs");
+	const { runPrint } = await import("./print-BAmEefvX.mjs");
 	try {
 		const result = await runPrint({
 			appUrl,
@@ -2031,7 +2031,7 @@ const chatCommand = {
 			sessionToken: auth.value.token,
 			agentSelector: argv.agent ?? null
 		});
-		const { runChat } = await import("./boot-CmInaUwJ.mjs");
+		const { runChat } = await import("./boot-B1Y1D48W.mjs");
 		await runChat({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -2115,7 +2115,7 @@ async function runPrintMode({ argv, appUrl }) {
 		printError(`${auth.error.message} For non-interactive use, run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { runPrint, readStdin } = await import("./print-DV9L41G2.mjs");
+	const { runPrint, readStdin } = await import("./print-BAmEefvX.mjs");
 	const workspaceId = await resolveWorkspaceFlag({
 		appUrl,
 		sessionToken: auth.value.token,
@@ -2145,7 +2145,7 @@ async function runPrintMode({ argv, appUrl }) {
 			process.exit(1);
 		}
 	} else {
-		const { connectMachineShare } = await import("./print-share-BBy3OTno.mjs");
+		const { connectMachineShare } = await import("./print-share-azWHVxpt.mjs");
 		machineShare = await connectMachineShare({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -2210,7 +2210,7 @@ const getCommand$1 = {
 			printError(`${auth.error.message} Run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 			process.exit(1);
 		}
-		const { messageGet } = await import("./print-DV9L41G2.mjs");
+		const { messageGet } = await import("./print-BAmEefvX.mjs");
 		try {
 			const result = await messageGet({
 				appUrl: auth.value.appUrl,
@@ -2326,7 +2326,7 @@ const showCommand = {
 			console.log(recap ?? "(no recap available)");
 			return;
 		}
-		const messages = await client.listMessages({ conversationId });
+		const { messages } = await client.listMessages({ conversationId });
 		if (argv.json) {
 			output(argv, messages);
 			return;
@@ -2413,7 +2413,7 @@ const switchCommand = {
 				printError("The workspace picker needs the Bun runtime and it could not be set up automatically. Pass a workspace slug instead, or install Bun and retry.");
 				process.exit(1);
 			}
-			const { runWorkspacePicker } = await import("./boot-CmInaUwJ.mjs");
+			const { runWorkspacePicker } = await import("./boot-B1Y1D48W.mjs");
 			await runWorkspacePicker(session);
 			return;
 		}
@@ -2492,7 +2492,7 @@ const openCommand = {
 		const agent = argv.agent ? resolveAgent$1((await fetchPortalDevices(session)).agents, argv.agent) : null;
 		const cwd = argv.cwd ? path.resolve(argv.cwd) : process.cwd();
 		const { machineName } = await resolveMachineIdentity(null);
-		const { PortalDaemonClient } = await import("./daemon-client-CC9sxWac.mjs");
+		const { PortalDaemonClient } = await import("./daemon-client-_SVAskeO.mjs");
 		let lastLine = "";
 		let signalConnected;
 		const connected = new Promise((resolve) => {
@@ -2806,8 +2806,8 @@ const sandboxCommand = {
 	}).example("skydive sandbox --agent grace", "Live terminal (Ctrl-] detaches)").example("skydive sandbox --agent grace -- tail -n 50 /tmp/harness.log", "One-shot command (use `--` so its flags reach the sandbox)").example("skydive sandbox --agent grace -- sh -c 'ls /tmp | wc -l'", "Shell features go through an explicit `sh -c`"),
 	handler: async (argv) => {
 		const session = requireSession(argv);
-		const { createRestClient } = await import("./rest-v-7FQqLP.mjs");
-		const { resolveAgent } = await import("./print-DV9L41G2.mjs");
+		const { createRestClient } = await import("./rest-B5DVQ1LM.mjs");
+		const { resolveAgent } = await import("./print-BAmEefvX.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken
@@ -3075,8 +3075,8 @@ const fsEditCommand = {
 	handler: async (argv) => {
 		const session = requireSession(argv);
 		const remotePath = argv.path;
-		const { createRestClient } = await import("./rest-v-7FQqLP.mjs");
-		const { resolveAgent } = await import("./print-DV9L41G2.mjs");
+		const { createRestClient } = await import("./rest-B5DVQ1LM.mjs");
+		const { resolveAgent } = await import("./print-BAmEefvX.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken
@@ -4403,7 +4403,7 @@ function setupUpdateCheck(argv) {
 
 //#endregion
 //#region src/changelog.generated.ts
-const CHANGELOG_MD = "# Changelog\n\nAll notable changes to the Skydive CLI are documented here.\n\nThe format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),\nand this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n\n## [Unreleased]\n\n### Changed\n\n- `npm i -g skydive-cli` (and yarn/pnpm/bun) now installs a tiny launcher plus one prebuilt, os/cpu-matched binary that carries its own runtime — so on the common platforms `skydive chat` and `skydive import` start instantly and **do not download a Bun runtime on first use**. On any platform without a prebuilt binary (or if the optional dependency is skipped), the CLI automatically falls back to the existing behavior: it runs under your Node and provisions Bun on first `chat`, exactly as before. Nothing about the commands, flags, config, or `SKYDIVE_*` environment variables changes, and `skydive update` still upgrades npm installs via your package manager and standalone-binary installs in place.\n\n### Added\n\n- `/search` (alias `/find`) in the chat TUI — opens the conversation picker with its search field focused, so \"find a conversation\" has a discoverable command instead of being a feature you had to know the bare picker already had. Pass a query inline (`/search billing deep dive`) and the picker opens already narrowed to the matches; bare `/search` opens it ready for you to type. The search runs server-side across conversation titles, message bodies, and participant names, the same search the picker exposes.\n- First run in a workspace with no agents now sets you up automatically: instead of dropping you on an empty agent picker, `skydive` creates your first agent for you (with a suggested name and avatar, mirroring the web onboarding flow) and then offers to have it learn how you already work — reading the other coding agents set up on your machine (Claude Code, Cursor, Codex, and more), the same import that `skydive import` runs, with a plan shown first and credentials never copied. Decline and you go straight into the new agent's chat. You can replay this flow anytime with `skydive --onboarding` (or `SKYDIVE_FORCE_ONBOARDING=1`), even in a workspace that already has agents.\n- `/computer` (alias `/stats`) in the chat TUI — a snapshot of the agent's sandbox drawn as colored bar graphs: CPU, memory, and disk usage. Bars turn amber past 75%% and red past 90%% so a glance tells you whether the box is under pressure. The numbers come from the Skydive API (the same live resource sample the web computer view reads), not by connecting to the sandbox — so the card shows instantly, never waking or hanging on a box that isn't running: when the agent has no live sandbox it simply reads \"no sandbox running\". The card keeps itself current quietly (a slow background refresh, no flicker or \"updating\" chrome); only the most recent card refreshes, and it silently stops while you're scrolled up (no wasted polls on a card you're not looking at) and resumes at the bottom.\n- `skydive fs` — a namespace for working with the files on an agent's computer (its sandbox) from your own machine. Its first subcommand, `skydive fs edit <path>`, reads a remote file down over the same relay `skydive sandbox` uses, opens it in your local editor (`$VISUAL`/`$EDITOR`, override with `--editor`, defaults to `vi`), and writes your changes back atomically when you save and close — so you can edit a remote file as if it were local without opening the chat TUI. A path that doesn't exist yet is created on save; no changes means nothing is written. Access is gated on EDIT permission for the agent, exactly like `skydive sandbox`. (A first-class `fs` relay channel and `skydive fs mount` land in follow-ups.)\n\n## [0.4.0] - 2026-08-07\n\n### Added\n\n- `skydive chat` works with API key auth: an API key alone now opens the chat TUI (and headless `chat -p`) without a browser login, using the key's pinned workspace.\n- `skydive config` command to view and set the safe, hand-editable CLI preferences (`shareMachineDefault`, `updateCheck`) without opening `config.json`. `config`/`config list` shows each key, its effective value, and whether it comes from the file or the built-in default; `config get`/`set`/`unset` read and change one key; `config path` prints the config file location. It only ever touches those preference keys, never credentials or flow-managed state.\n- Billing-blocked sends and runs now surface the server-authored recovery\n  guidance from the typed billing outcome. The chat TUI renders it as a\n  warning-toned system-notice row — live when a send is refused or a run is\n  stopped at the billing boundary, and again when reopening a conversation\n  that holds a persisted billing notice — instead of a generic error.\n  Headless `chat -p` and `messages get` print the guidance (state, recovery\n  step, and manage-billing URL) on stderr, keep any partial output already\n  streamed on stdout, and exit with code `5` (distinct from the generic `1`)\n  so scripted callers can tell a billing pause from a failure.\n- Syntax highlighting for 14 more languages in the chat transcript and file/review panes (python, bash, go, rust, c, cpp, java, ruby, css, html, json, yaml, and more) — previously only JavaScript/TypeScript rendered colored.\n\n### Changed\n\n- `skydive agent list` lists the full agent roster by default instead of a truncated page.\n\n### Fixed\n\n- Long multi-line bash tool-call commands (e.g. heredocs) are clamped with a `+N more · click to expand` tail instead of dumping their whole body into the scrollback.\n- Tool error output is clipped the same way as ok output, so a failing command no longer floods the transcript.\n- The TUI toast overlay has an opaque background instead of letting the transcript bleed through.\n\n## [0.3.0] - 2026-08-04\n\n### Added\n\n**Chat TUI**\n\n- `/fork` slash command to fork a conversation at any point and continue in a new thread.\n- `/conversation` switches threads from inside a live session.\n- `/compact` triggers manual conversation compaction.\n- `/portal` and `/copy` slash commands.\n- Archive the current conversation from the chat TUI.\n- `--new` flag on `skydive chat` to start a fresh conversation.\n- Debounced server-side conversation search in the picker, with title matches ranked first.\n- File review pane orientation toggle, and review comments in the file pane.\n- Pinned plan card controls and a jump-to-latest hint.\n- Terminal title (OSC) follows the live conversation title on every screen; inside cmux the workspace is renamed too, and linked PRs are pushed to the cmux sidebar.\n- Every participating agent shows in the conversation list; connect cards each have their own identity, and ctrl+r asks which connect card to act on.\n- Colored Skydive splash art in `skydive --help` and the TUI pickers.\n- New-agent name prefilled from the server's suggestion.\n\n**CLI & platform**\n\n- `skydive update` self-updater, with an update notice when a new version is available.\n- Shell completions for bash, zsh, and fish via `completion install`.\n- Portal daemon: one connection per host with per-conversation working directories.\n- Agent-led coding-agent import (`skydive import`).\n- Per-workspace scoping on the REST client, and cross-org `--agent <uuid>` auto-switches workspace.\n- `skydive-beta` wrapper for the canary channel.\n\n### Fixed\n\n- `skydive update` no longer claims an update is available on every npm install.\n- Chat memory is bounded (payload clamps + windowed rows) with a memory watchdog and OOM diagnostic report; transcript rows are memoized so streaming stops re-rendering the whole chat.\n- Chat-send failures map to real error messages.\n- Notification and sidebar previews use the last text block of the reply and strip inline markdown.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n- Sending to non-web channel conversations is blocked in the TUI.\n- GitHub bot connect opens on the web front door, not api.skydive.com.\n- TUI activity counter times from the run, not the screen.\n\n## [0.2.0] - 2026-07-29\n\n### Added\n\n**Sandbox & machine access**\n\n- Standalone `skydive sandbox` command for direct access to an agent's sandbox.\n- `/sandbox` in the chat TUI — live PTY session and one-shot command execution.\n- Headless machine sharing via `skydive portal`, with self-registering portal grants.\n- `shareMachineDefault` config key for always-on portal sharing.\n\n**Chat TUI**\n\n- File pane (`ctrl+g`) with Changes and Files tabs: a shared file tree plus source viewer and a workspace browser, mouse-resizable and responsive to terminal size.\n- Agent todo list rendered in the chat TUI, above the composer, mirroring the web chat's todo card.\n- Fuzzy finder in the conversation and agent pickers.\n- Slash-command autocomplete menu.\n- Paste or drag-and-drop any file into the composer; paste clipboard images with Cmd+V.\n- Run local shell commands with `!` in the composer.\n- Conversation recaps, streamed live title updates, and per-agent attribution on assistant turns.\n- Working timer rolls up into minutes and hours.\n- Conversation picker paginates past 50 conversations and shows only your own conversations.\n- Esc leaves a live run; typing `exit` quits the chat.\n- Cursor Dark theme.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n\n**Headless & scripting**\n\n- Resume a conversation by id.\n- `conversations list` and `conversations show` for transcript reads.\n- `messages get`, with run recovery keyed on message id.\n- Connect cards surface in headless `-p` mode so a driving agent never gets stuck.\n\n**Authentication**\n\n- `skydive auth login` via the browser now auto-mints an API key, so one login yields both a chat session and a usable management credential. Management commands announce the key's pinned workspace when it drives them, so a workspace mismatch is visible at use time.\n- Workspace picker on the device authorization page.\n- Account and workspace identity shown in `auth status`.\n\n**Platform**\n\n- Standalone binary builds compiling the CLI into a per-target executable.\n- Interactive workspace switcher; management commands follow the active workspace.\n- Terminal host integrations and agent notifications.\n\n### Fixed\n\n- Transcript errors collapse to one line, click to expand (REST and portal errors keep their full body).\n- Dragged/pasted image file paths attach the file instead of inserting path text, including macOS paths with literal parentheses.\n- Bare URLs in chat markdown are hyperlinked so they survive text wrap.\n- Composer draft is preserved across TUI overlays.\n- Relative connect links resolve before opening the browser.\n- Numbered markdown headings render colored in the TUI.\n- Chat transcript pages by 75% of a screen; picker rows stay on one line.\n- Run starts push to the TUI over the conversation stream.\n- Security: remediated high-severity dependency findings and cleared tar/shell-quote CVEs.\n\n## [0.1.0] - 2026-07-21\n\nInitial public release: `skydive chat` TUI, agent and conversation management,\ndevice authorization, and headless `-p` mode.\n";
+const CHANGELOG_MD = "# Changelog\n\nAll notable changes to the Skydive CLI are documented here.\n\nThe format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),\nand this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n\n## [Unreleased]\n\n### Changed\n\n- `npm i -g skydive-cli` (and yarn/pnpm/bun) now installs a tiny launcher plus one prebuilt, os/cpu-matched binary that carries its own runtime — so on the common platforms `skydive chat` and `skydive import` start instantly and **do not download a Bun runtime on first use**. On any platform without a prebuilt binary (or if the optional dependency is skipped), the CLI automatically falls back to the existing behavior: it runs under your Node and provisions Bun on first `chat`, exactly as before. Nothing about the commands, flags, config, or `SKYDIVE_*` environment variables changes, and `skydive update` still upgrades npm installs via your package manager and standalone-binary installs in place.\n\n### Added\n\n- `/search` (alias `/find`) in the chat TUI — opens the conversation picker with its search field focused, so \"find a conversation\" has a discoverable command instead of being a feature you had to know the bare picker already had. Pass a query inline (`/search billing deep dive`) and the picker opens already narrowed to the matches; bare `/search` opens it ready for you to type. The search runs server-side across conversation titles, message bodies, and participant names, the same search the picker exposes.\n- First run in a workspace with no agents now sets you up automatically: instead of dropping you on an empty agent picker, `skydive` creates your first agent for you (with a suggested name and avatar, mirroring the web onboarding flow) and then offers to have it learn how you already work — reading the other coding agents set up on your machine (Claude Code, Cursor, Codex, and more), the same import that `skydive import` runs, with a plan shown first and credentials never copied. Decline and you go straight into the new agent's chat. You can replay this flow anytime with `skydive --onboarding` (or `SKYDIVE_FORCE_ONBOARDING=1`), even in a workspace that already has agents.\n- `/computer` in the chat TUI — a snapshot of the agent's sandbox drawn as colored bar graphs: CPU, memory, and disk usage. Bars turn amber past 75%% and red past 90%% so a glance tells you whether the box is under pressure. The numbers come from the Skydive API (the same live resource sample the web computer view reads), not by connecting to the sandbox — so the card shows instantly, never waking or hanging on a box that isn't running: when the agent has no live sandbox it simply reads \"no sandbox running\". The card keeps itself current quietly (a slow background refresh, no flicker or \"updating\" chrome); only the most recent card refreshes, and it silently stops while you're scrolled up (no wasted polls on a card you're not looking at) and resumes at the bottom.\n- `/computer restart` in the chat TUI — reboot the agent's sandbox from chat. It asks a `y`/`n` confirm first (the restart stops whatever run is going and brings up a fresh box), then enqueues the same restart the web \"Restart\" control does. Available to anyone with edit access to the agent; view-only members are told they can't.\n- `skydive fs` — a namespace for working with the files on an agent's computer (its sandbox) from your own machine. Its first subcommand, `skydive fs edit <path>`, reads a remote file down over the same relay `skydive sandbox` uses, opens it in your local editor (`$VISUAL`/`$EDITOR`, override with `--editor`, defaults to `vi`), and writes your changes back atomically when you save and close — so you can edit a remote file as if it were local without opening the chat TUI. A path that doesn't exist yet is created on save; no changes means nothing is written. Access is gated on EDIT permission for the agent, exactly like `skydive sandbox`. (A first-class `fs` relay channel and `skydive fs mount` land in follow-ups.)\n\n## [0.4.0] - 2026-08-07\n\n### Added\n\n- `skydive chat` works with API key auth: an API key alone now opens the chat TUI (and headless `chat -p`) without a browser login, using the key's pinned workspace.\n- `skydive config` command to view and set the safe, hand-editable CLI preferences (`shareMachineDefault`, `updateCheck`) without opening `config.json`. `config`/`config list` shows each key, its effective value, and whether it comes from the file or the built-in default; `config get`/`set`/`unset` read and change one key; `config path` prints the config file location. It only ever touches those preference keys, never credentials or flow-managed state.\n- Billing-blocked sends and runs now surface the server-authored recovery\n  guidance from the typed billing outcome. The chat TUI renders it as a\n  warning-toned system-notice row — live when a send is refused or a run is\n  stopped at the billing boundary, and again when reopening a conversation\n  that holds a persisted billing notice — instead of a generic error.\n  Headless `chat -p` and `messages get` print the guidance (state, recovery\n  step, and manage-billing URL) on stderr, keep any partial output already\n  streamed on stdout, and exit with code `5` (distinct from the generic `1`)\n  so scripted callers can tell a billing pause from a failure.\n- Syntax highlighting for 14 more languages in the chat transcript and file/review panes (python, bash, go, rust, c, cpp, java, ruby, css, html, json, yaml, and more) — previously only JavaScript/TypeScript rendered colored.\n\n### Changed\n\n- `skydive agent list` lists the full agent roster by default instead of a truncated page.\n\n### Fixed\n\n- Long multi-line bash tool-call commands (e.g. heredocs) are clamped with a `+N more · click to expand` tail instead of dumping their whole body into the scrollback.\n- Tool error output is clipped the same way as ok output, so a failing command no longer floods the transcript.\n- The TUI toast overlay has an opaque background instead of letting the transcript bleed through.\n\n## [0.3.0] - 2026-08-04\n\n### Added\n\n**Chat TUI**\n\n- `/fork` slash command to fork a conversation at any point and continue in a new thread.\n- `/conversation` switches threads from inside a live session.\n- `/compact` triggers manual conversation compaction.\n- `/portal` and `/copy` slash commands.\n- Archive the current conversation from the chat TUI.\n- `--new` flag on `skydive chat` to start a fresh conversation.\n- Debounced server-side conversation search in the picker, with title matches ranked first.\n- File review pane orientation toggle, and review comments in the file pane.\n- Pinned plan card controls and a jump-to-latest hint.\n- Terminal title (OSC) follows the live conversation title on every screen; inside cmux the workspace is renamed too, and linked PRs are pushed to the cmux sidebar.\n- Every participating agent shows in the conversation list; connect cards each have their own identity, and ctrl+r asks which connect card to act on.\n- Colored Skydive splash art in `skydive --help` and the TUI pickers.\n- New-agent name prefilled from the server's suggestion.\n\n**CLI & platform**\n\n- `skydive update` self-updater, with an update notice when a new version is available.\n- Shell completions for bash, zsh, and fish via `completion install`.\n- Portal daemon: one connection per host with per-conversation working directories.\n- Agent-led coding-agent import (`skydive import`).\n- Per-workspace scoping on the REST client, and cross-org `--agent <uuid>` auto-switches workspace.\n- `skydive-beta` wrapper for the canary channel.\n\n### Fixed\n\n- `skydive update` no longer claims an update is available on every npm install.\n- Chat memory is bounded (payload clamps + windowed rows) with a memory watchdog and OOM diagnostic report; transcript rows are memoized so streaming stops re-rendering the whole chat.\n- Chat-send failures map to real error messages.\n- Notification and sidebar previews use the last text block of the reply and strip inline markdown.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n- Sending to non-web channel conversations is blocked in the TUI.\n- GitHub bot connect opens on the web front door, not api.skydive.com.\n- TUI activity counter times from the run, not the screen.\n\n## [0.2.0] - 2026-07-29\n\n### Added\n\n**Sandbox & machine access**\n\n- Standalone `skydive sandbox` command for direct access to an agent's sandbox.\n- `/sandbox` in the chat TUI — live PTY session and one-shot command execution.\n- Headless machine sharing via `skydive portal`, with self-registering portal grants.\n- `shareMachineDefault` config key for always-on portal sharing.\n\n**Chat TUI**\n\n- File pane (`ctrl+g`) with Changes and Files tabs: a shared file tree plus source viewer and a workspace browser, mouse-resizable and responsive to terminal size.\n- Agent todo list rendered in the chat TUI, above the composer, mirroring the web chat's todo card.\n- Fuzzy finder in the conversation and agent pickers.\n- Slash-command autocomplete menu.\n- Paste or drag-and-drop any file into the composer; paste clipboard images with Cmd+V.\n- Run local shell commands with `!` in the composer.\n- Conversation recaps, streamed live title updates, and per-agent attribution on assistant turns.\n- Working timer rolls up into minutes and hours.\n- Conversation picker paginates past 50 conversations and shows only your own conversations.\n- Esc leaves a live run; typing `exit` quits the chat.\n- Cursor Dark theme.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n\n**Headless & scripting**\n\n- Resume a conversation by id.\n- `conversations list` and `conversations show` for transcript reads.\n- `messages get`, with run recovery keyed on message id.\n- Connect cards surface in headless `-p` mode so a driving agent never gets stuck.\n\n**Authentication**\n\n- `skydive auth login` via the browser now auto-mints an API key, so one login yields both a chat session and a usable management credential. Management commands announce the key's pinned workspace when it drives them, so a workspace mismatch is visible at use time.\n- Workspace picker on the device authorization page.\n- Account and workspace identity shown in `auth status`.\n\n**Platform**\n\n- Standalone binary builds compiling the CLI into a per-target executable.\n- Interactive workspace switcher; management commands follow the active workspace.\n- Terminal host integrations and agent notifications.\n\n### Fixed\n\n- Transcript errors collapse to one line, click to expand (REST and portal errors keep their full body).\n- Dragged/pasted image file paths attach the file instead of inserting path text, including macOS paths with literal parentheses.\n- Bare URLs in chat markdown are hyperlinked so they survive text wrap.\n- Composer draft is preserved across TUI overlays.\n- Relative connect links resolve before opening the browser.\n- Numbered markdown headings render colored in the TUI.\n- Chat transcript pages by 75% of a screen; picker rows stay on one line.\n- Run starts push to the TUI over the conversation stream.\n- Security: remediated high-severity dependency findings and cleared tar/shell-quote CVEs.\n\n## [0.1.0] - 2026-07-21\n\nInitial public release: `skydive chat` TUI, agent and conversation management,\ndevice authorization, and headless `-p` mode.\n";
 
 //#endregion
 //#region src/whats-new.ts
@@ -4546,7 +4546,7 @@ if (process.argv.includes(UPDATE_WORKER_FLAG)) {
 	process.exit(0);
 }
 if (process.argv.includes(PORTAL_DAEMON_FLAG)) {
-	const { runPortalDaemon } = await import("./daemon-Dg89tpOE.mjs");
+	const { runPortalDaemon } = await import("./daemon-By-I_HVM.mjs");
 	runPortalDaemon(process.argv);
 } else runCli();
 function runCli() {

package/dist/js/{boot-CmInaUwJ.mjs → boot-B1Y1D48W.mjs}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import { A as installAgentAlias, C as themeVersion, D as machineOsFromPlatform, F as detectShell, L as getActiveWorkspaceId, M as takenAliasNames, O as aliasActivationHint, S as themeModeFromColorFgBg, T as themesForMode, V as setActiveWorkspace, _ as monoTheme, a as WORDMARK, b as themeForMode, d as profilingEnabled, f as record, g as findTheme, h as applyTheme, i as MARK_CELLS, j as slugifyAliasName, k as dedupeAliasName, m as DEFAULT_THEME_ID, n as buildCrashReport, p as writeArtifact, r as writeCrashReport, s as splashFitsWidth, t as installCrashHandler, v as noColorRequested, x as themeMode, y as theme, z as listWorkspaces } from "./install-aZ751iYf.mjs";
-import { B as resolveWebUrl, C as getConfigPath, O as getReviewStateDir, P as recordDefaultAgent, U as saveTheme, b as DEFAULT_APP_URL, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, h as specKeyFor, i as resolveAgent, k as getSavedTheme, l as parseExternalOauthConnectParams, m as parseConnectCard, p as computeSettledLabel, s as MASK_CHAR, u as parseOauthConnectParams, y as DEFAULT_API_URL } from "./print-h22UbIfZ.mjs";
+import { A as installAgentAlias, C as themeVersion, D as machineOsFromPlatform, F as detectShell, L as getActiveWorkspaceId, M as takenAliasNames, O as aliasActivationHint, S as themeModeFromColorFgBg, T as themesForMode, V as setActiveWorkspace, _ as monoTheme, a as WORDMARK, b as themeForMode, d as profilingEnabled, f as record, g as findTheme, h as applyTheme, i as MARK_CELLS, j as slugifyAliasName, k as dedupeAliasName, m as DEFAULT_THEME_ID, n as buildCrashReport, p as writeArtifact, r as writeCrashReport, s as splashFitsWidth, t as installCrashHandler, v as noColorRequested, x as themeMode, y as theme, z as listWorkspaces } from "./install-BkMcGVYS.mjs";
+import { B as resolveWebUrl, C as getConfigPath, O as getReviewStateDir, P as recordDefaultAgent, U as saveTheme, b as DEFAULT_APP_URL, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, h as specKeyFor, i as resolveAgent, k as getSavedTheme, l as parseExternalOauthConnectParams, m as parseConnectCard, p as computeSettledLabel, s as MASK_CHAR, u as parseOauthConnectParams, y as DEFAULT_API_URL } from "./print-CwbdwCeQ.mjs";
 import { t as HttpError } from "./http-error-UHH3mVBF.mjs";
-import { a as isRecord, i as errorMessage, n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-ClVPZquN.mjs";
+import { a as isRecord, i as errorMessage, n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-Bbe-RhMy.mjs";
 import { i as billingBlockedOutcomeFromSendResponse } from "./billing-blocked-D3l5kJlX.mjs";
-import { t as PortalClient } from "./client-d6K9qm6B.mjs";
-import "./daemon-CH95gDij.mjs";
+import { t as PortalClient } from "./client-DMYwKALl.mjs";
+import "./daemon-D8WoX21I.mjs";
 import { t as defaultTlsCertSource } from "./tls-cert-CV-pwxVN.mjs";
 import "./api-DQCaztBg.mjs";
 import { t as SandboxStream } from "./client-Btq6bMzX.mjs";
-import { t as PortalDaemonClient } from "./daemon-client-BNDnEGw6.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-Bp5DMeIi.mjs";
 import { t as runRawPtyPassthrough } from "./raw-pty-D5PhKZSl.mjs";
 import * as os$1 from "node:os";
 import { homedir, platform, release, tmpdir } from "node:os";
@@ -7304,9 +7304,14 @@ const MAX_NOTIFICATION_PREVIEW_CHARS = 240;
 * preview: emphasis, inline code, links/images, headings, blockquotes, and
 * list bullets. Block structure is already gone by the time we preview (we
 * collapse whitespace to a single line).
+*
+* Underscore emphasis follows CommonMark's intra-word rule: `_` is only an
+* emphasis delimiter at a word boundary, so an identifier such as
+* `SANDBOX_MAX_CONCURRENT_CREATES` keeps its underscores instead of being
+* mangled into `SANDBOXMAXCONCURRENTCREATES`. Asterisks stay permissive.
 */
 function stripInlineMarkdown(input) {
-	return input.replace(/!\[([^\]]*)\]\([^)]*\)/g, "$1").replace(/\[([^\]]+)\]\([^)]*\)/g, "$1").replace(/`([^`]+)`/g, "$1").replace(/(\*\*\*|\*\*|\*|___|__|_)(?=\S)(.*?\S)\1/g, "$2").replace(/(\*\*\*|\*\*|\*|___|__|_)(?=\S)(.*?\S)\1/g, "$2").replace(/~~(?=\S)(.*?\S)~~/g, "$1").replace(/^\s{0,3}#{1,6}\s+/gm, "").replace(/^\s{0,3}>\s?/gm, "").replace(/^\s{0,3}(?:[-*+]|\d+\.)\s+/gm, "");
+	return input.replace(/!\[([^\]]*)\]\([^)]*\)/g, "$1").replace(/\[([^\]]+)\]\([^)]*\)/g, "$1").replace(/`([^`]+)`/g, "$1").replace(/(\*\*\*|\*\*|\*)(?=\S)(.*?\S)\1/g, "$2").replace(/(\*\*\*|\*\*|\*)(?=\S)(.*?\S)\1/g, "$2").replace(/(?<!\w)(___|__|_)(?=\S)(.*?\S)\1(?!\w)/g, "$2").replace(/(?<!\w)(___|__|_)(?=\S)(.*?\S)\1(?!\w)/g, "$2").replace(/~~(?=\S)(.*?\S)~~/g, "$1").replace(/^\s{0,3}#{1,6}\s+/gm, "").replace(/^\s{0,3}>\s?/gm, "").replace(/^\s{0,3}(?:[-*+]|\d+\.)\s+/gm, "");
 }
 /**
 * Collects assistant `text-delta` chunks for one run and turns them into a
@@ -8215,9 +8220,9 @@ const slashCommands = [
 	},
 	{
 		name: "computer",
-		aliases: ["stats"],
-		argsHint: null,
-		description: "show the agent sandbox's cpu, memory, and disk",
+		aliases: [],
+		argsHint: "[restart]",
+		description: "show the agent sandbox's cpu/memory/disk (restart: reboot it)",
 		action: { kind: "computer" }
 	},
 	{
@@ -11709,6 +11714,7 @@ function routeInput(raw) {
 				kind: "rename-conversation",
 				title: match.rest
 			};
+			case "computer": return match.rest.toLowerCase() === "restart" ? { kind: "computer-restart" } : { kind: "computer" };
 			case "plan": {
 				const arg = match.rest.toLowerCase();
 				return {
@@ -11724,7 +11730,6 @@ function routeInput(raw) {
 			case "theme-picker":
 			case "pr-picker":
 			case "status":
-			case "computer":
 			case "share":
 			case "browser":
 			case "connect":
@@ -11825,6 +11830,16 @@ const composerKeyBindings = [
 * keep your place instead of landing on entirely unfamiliar text.
 */
 const pageScrollFraction = .75;
+/**
+* How many of the newest messages the chat screen fetches before it becomes
+* interactive on `--resume`. A long transcript used to load in one unbounded
+* request — the whole history transferred, parsed, and rendered before the
+* first frame — which is what made resuming an old conversation hang. Now we
+* pull just this visible tail first, then background-backfill older pages.
+* Sized to comfortably overfill a tall terminal so the initial view is full
+* without a visible "loading earlier" beat on ordinary conversations.
+*/
+const HISTORY_PAGE_SIZE = 60;
 /** Cap composer growth; past this the textarea scrolls its content instead. */
 const maxComposerRows = 8;
 const maxAttachments = 10;
@@ -11954,9 +11969,10 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 	const credPromptOpen = credPrompt !== null;
 	const [computePrompt, setComputePrompt] = useState(null);
 	const computePromptOpen = computePrompt !== null;
+	const [restartConfirm, setRestartConfirm] = useState(false);
 	const [menuDismissed, setMenuDismissed] = useState(false);
 	const [menuHighlight, setMenuHighlight] = useState(0);
-	const commandQuery = grantPrompt || credPrompt || computePrompt ? null : detectCommandTrigger(input);
+	const commandQuery = grantPrompt || credPrompt || computePrompt || restartConfirm ? null : detectCommandTrigger(input);
 	const menuCommands = commandQuery === null ? [] : filterSlashCommands(commandQuery);
 	const menuOpen = commandQuery !== null && !menuDismissed;
 	const menuHighlightClamped = Math.min(menuHighlight, Math.max(0, menuCommands.length - 1));
@@ -11974,7 +11990,7 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 	credPromptRef.current = credPrompt;
 	const seenRunsRef = useRef(/* @__PURE__ */ new Set());
 	const shellSessionRef = useRef(null);
-	const hostState = grantPrompt || credPrompt || computePrompt ? "blocked" : run.kind === "idle" ? "idle" : "working";
+	const hostState = grantPrompt || credPrompt || computePrompt || restartConfirm ? "blocked" : run.kind === "idle" ? "idle" : "working";
 	useEffect(() => {
 		agentHost.transition({ state: hostState });
 	}, [agentHost, hostState]);
@@ -12035,7 +12051,8 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 	const credPromptHeight = 4 + (credPrompt && (credPrompt.error || credPrompt.submitting) ? 1 : 0);
 	const nonWebNoticeHeight = 5;
 	const computePromptHeight = 4;
-	const bottomBoxHeight = credPrompt ? credPromptHeight : computePrompt ? computePromptHeight : nonWebChannel ? nonWebNoticeHeight : composerBoxHeight;
+	const restartConfirmHeight = 3;
+	const bottomBoxHeight = credPrompt ? credPromptHeight : computePrompt ? computePromptHeight : restartConfirm ? restartConfirmHeight : nonWebChannel ? nonWebNoticeHeight : composerBoxHeight;
 	const bodyWidth = Math.max(1, width - 2);
 	const bodyHeight = Math.max(1, height - 3);
 	const reviewPlacement = filePanePlacement({
@@ -12099,32 +12116,55 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 	]);
 	useEffect(() => {
 		if (!rest || !initialConversationId) return;
+		const conversationId = initialConversationId;
 		let cancelled = false;
+		const seedPrLinks = (items) => {
+			const toolUrlText = items.map((item) => item.kind === "tool" && item.output?.kind === "ok" ? stringifyToolOutput(item.output.value) : "").join("\n");
+			for (const item of items) {
+				if (item.kind !== "assistant-text") continue;
+				for (const pr of extractPullRequests(item.text, {
+					requireCompleteNumber: false,
+					urlOnlyText: toolUrlText
+				})) {
+					if (reportedPrsRef.current.has(pr.key)) continue;
+					reportedPrsRef.current.set(pr.key, pr);
+					setPrLinks((prev) => [...prev, pr]);
+					agentHost.addPullRequest(pr);
+				}
+			}
+		};
 		(async () => {
 			try {
-				const [messages, recapText] = await Promise.all([rest.listMessages({ conversationId: initialConversationId }), rest.getRecap({ conversationId: initialConversationId }).catch(() => null)]);
+				const [firstPage, recapText] = await Promise.all([rest.listMessages({
+					conversationId,
+					limit: HISTORY_PAGE_SIZE
+				}), rest.getRecap({ conversationId }).catch(() => null)]);
 				if (cancelled) return;
-				const loaded = uiMessagesToItems(messages);
+				const loaded = uiMessagesToItems(firstPage.messages);
 				if (recapText && loaded.length > 0) loaded.push({
 					kind: "recap",
-					id: `recap-${initialConversationId}`,
+					id: `recap-${conversationId}`,
 					text: recapText
 				});
 				setItems(loaded);
-				const toolUrlText = loaded.map((item) => item.kind === "tool" && item.output?.kind === "ok" ? stringifyToolOutput(item.output.value) : "").join("\n");
-				for (const item of loaded) {
-					if (item.kind !== "assistant-text") continue;
-					for (const pr of extractPullRequests(item.text, {
-						requireCompleteNumber: false,
-						urlOnlyText: toolUrlText
-					})) {
-						if (reportedPrsRef.current.has(pr.key)) continue;
-						reportedPrsRef.current.set(pr.key, pr);
-						setPrLinks((prev) => [...prev, pr]);
-						agentHost.addPullRequest(pr);
+				seedPrLinks(loaded);
+				setTodos(latestTodosFromHistory(firstPage.messages));
+				setHistoryLoaded(true);
+				let before = firstPage.hasMore ? firstPage.nextBefore : null;
+				while (before) {
+					const older = await rest.listMessages({
+						conversationId,
+						limit: HISTORY_PAGE_SIZE,
+						before
+					});
+					if (cancelled) return;
+					const olderItems = uiMessagesToItems(older.messages);
+					if (olderItems.length > 0) {
+						setItems((prev) => [...olderItems, ...prev]);
+						seedPrLinks(olderItems);
 					}
+					before = older.hasMore ? older.nextBefore : null;
 				}
-				setTodos(latestTodosFromHistory(messages));
 			} catch (err) {
 				if (cancelled) return;
 				setItems((prev) => [...prev, {
@@ -12132,8 +12172,7 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 					id: crypto.randomUUID(),
 					text: `failed to load history: ${errorDetail(err)}`
 				}]);
-			} finally {
-				if (!cancelled) setHistoryLoaded(true);
+				setHistoryLoaded(true);
 			}
 		})();
 		return () => {
@@ -12761,6 +12800,25 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 			error: null
 		}]);
 	}, [appUrl, sessionToken]);
+	const runRestartComputer = useCallback(async () => {
+		if (!rest) return;
+		try {
+			await rest.restartAgent(agent.id);
+			setItems((prev) => [...prev, {
+				kind: "info",
+				id: crypto.randomUUID(),
+				title: "computer",
+				text: `restarting ${agent.name}'s sandbox — the current run (if any) is stopped and a fresh box comes up in a moment.`
+			}]);
+		} catch (err) {
+			const message = err instanceof HttpError && err.status === 404 ? "you don't have permission to restart this agent's sandbox." : `couldn't restart the sandbox: ${err instanceof Error ? err.message : String(err)}`;
+			useStore.getState().showToast({ message });
+		}
+	}, [
+		rest,
+		agent.id,
+		agent.name
+	]);
 	const runSandboxPty = useCallback(async () => {
 		if (!appUrl || !sessionToken) return;
 		const result = await runPtySession({
@@ -12855,7 +12913,7 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 		stageAttachment(image);
 	}, [stageAttachment]);
 	usePaste((event) => {
-		if (cardPickerOpen || modelPickerOpen || themePickerOpen || prPickerOpen || helpOpen || bgTasksOpen || credPromptOpen || grantPrompt || computePromptOpen || nonWebChannel) return;
+		if (cardPickerOpen || modelPickerOpen || themePickerOpen || prPickerOpen || helpOpen || bgTasksOpen || credPromptOpen || grantPrompt || computePromptOpen || restartConfirm || nonWebChannel) return;
 		const text = event.metadata?.kind === "binary" ? "" : decodePasteBytes(event.bytes);
 		const route = routePaste({
 			kind: event.metadata?.kind,
@@ -12994,7 +13052,7 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 		goTo
 	]);
 	const archiveConversation = useCallback(() => {
-		if (grantPrompt || credPrompt || computePrompt) return;
+		if (grantPrompt || credPrompt || computePrompt || restartConfirm) return;
 		if (agentRunConversation) {
 			useStore.getState().showToast({ message: "agent runs can't be archived — ctrl+d in the picker deletes" });
 			return;
@@ -13029,6 +13087,7 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 		grantPrompt,
 		credPrompt,
 		computePrompt,
+		restartConfirm,
 		agentRunConversation,
 		conversationId,
 		rest,
@@ -13332,6 +13391,9 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 				case "computer":
 					runComputerStats();
 					break;
+				case "computer-restart":
+					setRestartConfirm(true);
+					break;
 				case "plan": {
 					if (!(!!todos && todos.length > 0)) {
 						useStore.getState().showToast({ message: "no plan to show yet" });
@@ -13500,6 +13562,17 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 				return;
 			}
 		}
+		if (restartConfirm) {
+			if (key.name === "y") {
+				setRestartConfirm(false);
+				runRestartComputer();
+				return;
+			}
+			if (key.name === "n" || key.name === "escape") {
+				setRestartConfirm(false);
+				return;
+			}
+		}
 		if (credPrompt) {
 			if (key.name === "escape") {
 				if (!credPrompt.submitting) setCredPrompt(null);
@@ -14066,6 +14139,40 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 						children: " later"
 					})
 				] })]
+			}) : restartConfirm ? /* @__PURE__ */ jsxs("box", {
+				style: {
+					border: true,
+					borderColor: theme.warning,
+					paddingLeft: 1,
+					paddingRight: 1,
+					height: restartConfirmHeight,
+					flexShrink: 0,
+					marginTop: 1,
+					flexDirection: "row"
+				},
+				children: [
+					/* @__PURE__ */ jsxs("text", {
+						fg: theme.warning,
+						children: [
+							"restart ",
+							agent.name,
+							"'s sandbox? this stops the current run.",
+							" "
+						]
+					}),
+					/* @__PURE__ */ jsx("text", {
+						fg: theme.success,
+						children: "y"
+					}),
+					/* @__PURE__ */ jsx("text", {
+						fg: theme.muted,
+						children: " / "
+					}),
+					/* @__PURE__ */ jsx("text", {
+						fg: theme.error,
+						children: "n"
+					})
+				]
 			}) : nonWebChannel ? /* @__PURE__ */ jsxs("box", {
 				style: {
 					border: true,

package/dist/js/client-DCwVlAal.mjs

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import { t as PortalClient } from "./client-DMYwKALl.mjs";
+import "./api-DQCaztBg.mjs";
+
+export { PortalClient };

package/dist/js/{client-d6K9qm6B.mjs → client-DMYwKALl.mjs}

@@ -536,8 +536,14 @@ var JobManager = class {
 
 //#endregion
 //#region ../portal-daemon/src/client.ts
-const INITIAL_BACKOFF_MS = 500;
-const MAX_BACKOFF_MS = 1e4;
+const DEFAULT_HEARTBEAT = {
+	intervalMs: 15e3,
+	maxMissed: 2,
+	wakeTickMs: 2e3,
+	wakeGapThresholdMs: 1e4,
+	initialBackoffMs: 500,
+	maxBackoffMs: 1e4
+};
 /**
 * Shares the local machine with agents over the portal: dials OUT to the api's
 * desktop-portal WebSocket (authenticating with a short-lived device token
@@ -560,8 +566,38 @@ var PortalClient = class {
 	machineName = "";
 	friendlyName = "";
 	legacyGrantsChecked = false;
+	wakeWatch = null;
+	lastTick = Date.now();
+	heartbeatConfig;
 	constructor(opts) {
 		this.opts = opts;
+		this.heartbeatConfig = {
+			...DEFAULT_HEARTBEAT,
+			...opts.heartbeat
+		};
+		this.startWakeWatch();
+	}
+	/**
+	* Detect wake-from-sleep without an Electron/`powerMonitor` dependency (the
+	* daemon also runs headless under the CLI). A repeating timer that should
+	* fire every WAKE_TICK_MS; when the actual gap since the last tick far
+	* exceeds that, the process was suspended (macOS sleep, laptop lid) and the
+	* current socket — if any — is a zombie against a server that has already
+	* reaped our presence. Terminate it now so `connectLoop` redials at once
+	* instead of waiting out the heartbeat deadline. Cheap: one no-op timer.
+	*/
+	startWakeWatch() {
+		this.lastTick = Date.now();
+		this.wakeWatch = setInterval(() => {
+			const now = Date.now();
+			const gap = now - this.lastTick;
+			this.lastTick = now;
+			if (gap > this.heartbeatConfig.wakeGapThresholdMs && this.ws) {
+				this.error = "woke from sleep; reconnecting portal";
+				this.ws.terminate();
+			}
+		}, this.heartbeatConfig.wakeTickMs);
+		this.wakeWatch.unref?.();
 	}
 	isEnabled() {
 		return this.enabled;
@@ -597,6 +633,10 @@ var PortalClient = class {
 	dispose() {
 		this.disposed = true;
 		this.enabled = false;
+		if (this.wakeWatch) {
+			clearInterval(this.wakeWatch);
+			this.wakeWatch = null;
+		}
 		this.jobs?.killAll();
 		this.jobs = null;
 		this.ws?.close();
@@ -661,24 +701,31 @@ var PortalClient = class {
 			this.friendlyName = identity.friendlyName;
 			this.opts.onMachineName(identity.machineName, identity.machineNameSource);
 		}
-		let backoff = INITIAL_BACKOFF_MS;
+		let backoff = this.heartbeatConfig.initialBackoffMs;
 		while (this.enabled && !this.disposed) {
 			this.setStatus("connecting");
 			try {
 				const token = await this.wsToken();
-				await this.runConnection(token);
-				backoff = INITIAL_BACKOFF_MS;
+				if (await this.runConnection(token)) backoff = this.heartbeatConfig.initialBackoffMs;
+				else backoff = Math.min(backoff * 2, this.heartbeatConfig.maxBackoffMs);
 			} catch (err) {
 				if (!this.enabled || this.disposed) break;
 				this.setStatus("error", errorMessage(err));
+				backoff = Math.min(backoff * 2, this.heartbeatConfig.maxBackoffMs);
 			}
 			if (!this.enabled || this.disposed) break;
-			await sleep(backoff);
-			backoff = Math.min(backoff * 2, MAX_BACKOFF_MS);
+			await sleep(Math.random() * backoff);
 		}
 	}
 	runConnection(token) {
 		return new Promise((resolve) => {
+			let settled = false;
+			let healthy = false;
+			const settle = () => {
+				if (settled) return;
+				settled = true;
+				resolve(healthy);
+			};
 			const ws = new WebSocket(portalWsUrl(this.opts.appUrl, this.machineName, this.friendlyName), {
 				headers: { authorization: `Bearer ${token}` },
 				maxPayload: MAX_WS_FRAME_BYTES
@@ -692,21 +739,40 @@ var PortalClient = class {
 				}
 			});
 			this.jobs = jobs;
+			let missed = 0;
+			const heartbeat = setInterval(() => {
+				if (ws.readyState !== WebSocket.OPEN) return;
+				if (missed >= this.heartbeatConfig.maxMissed) {
+					this.error = "portal connection went silent (no pong); reconnecting";
+					ws.terminate();
+					return;
+				}
+				missed += 1;
+				ws.ping();
+			}, this.heartbeatConfig.intervalMs);
+			const markAlive = () => {
+				missed = 0;
+				healthy = true;
+			};
 			ws.on("open", () => {
 				this.setStatus("connected");
 				this.syncDeviceState();
 			});
+			ws.on("pong", markAlive);
+			ws.on("ping", markAlive);
 			ws.on("message", (data, isBinary) => {
+				markAlive();
 				if (isBinary) jobs.handleFrame(toBuffer(data));
 			});
 			ws.on("error", (err) => {
 				this.error = errorMessage(err);
 			});
 			ws.on("close", () => {
+				clearInterval(heartbeat);
 				jobs.killAll();
 				if (this.jobs === jobs) this.jobs = null;
 				if (this.ws === ws) this.ws = null;
-				resolve();
+				settle();
 			});
 		});
 	}

package/dist/js/{daemon-Dg89tpOE.mjs → daemon-By-I_HVM.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import "./client-d6K9qm6B.mjs";
-import { a as runPortalDaemon, i as queryDaemonStatus, n as ensureDaemonRunning, o as startPortalDaemon, r as isDaemonListening, s as stopDaemon, t as PortalDaemon } from "./daemon-CH95gDij.mjs";
+import "./client-DMYwKALl.mjs";
+import { a as runPortalDaemon, i as queryDaemonStatus, n as ensureDaemonRunning, o as startPortalDaemon, r as isDaemonListening, s as stopDaemon, t as PortalDaemon } from "./daemon-D8WoX21I.mjs";
 import "./tls-cert-CV-pwxVN.mjs";
 import "./api-DQCaztBg.mjs";
 

package/dist/js/{daemon-CH95gDij.mjs → daemon-D8WoX21I.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { n as isRecord, t as PortalClient } from "./client-d6K9qm6B.mjs";
+import { n as isRecord, t as PortalClient } from "./client-DMYwKALl.mjs";
 import { t as defaultTlsCertSource } from "./tls-cert-CV-pwxVN.mjs";
 import os from "node:os";
 import path from "node:path";
@@ -21,7 +21,7 @@ import { access, appendFile, mkdir, readFile, unlink, writeFile } from "node:fs/
 * the commit time of the built tree is one monotonic clock they share.
 */
 function portalDaemonBuild() {
-	return "1786860400";
+	return "1786915412";
 }
 /**
 * Whether a client carrying `mine` should replace a running daemon carrying

package/dist/js/{daemon-client-BNDnEGw6.mjs → daemon-client-Bp5DMeIi.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { c as LOCAL_PROTOCOL_VERSION, d as encodeLine, f as makeLineParser, n as ensureDaemonRunning, p as parseDaemonMessage, u as daemonPaths } from "./daemon-CH95gDij.mjs";
+import { c as LOCAL_PROTOCOL_VERSION, d as encodeLine, f as makeLineParser, n as ensureDaemonRunning, p as parseDaemonMessage, u as daemonPaths } from "./daemon-D8WoX21I.mjs";
 import { randomUUID } from "node:crypto";
 import { connect } from "node:net";
 

package/dist/js/daemon-client-_SVAskeO.mjs

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import "./client-DMYwKALl.mjs";
+import "./daemon-D8WoX21I.mjs";
+import "./tls-cert-CV-pwxVN.mjs";
+import "./api-DQCaztBg.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-Bp5DMeIi.mjs";
+
+export { PortalDaemonClient };

package/dist/js/{install-aZ751iYf.mjs → install-BkMcGVYS.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as getConfigPath } from "./print-h22UbIfZ.mjs";
+import { C as getConfigPath } from "./print-CwbdwCeQ.mjs";
 import os from "node:os";
 import path from "node:path";
 import { err, ok } from "neverthrow";
@@ -8,7 +8,7 @@ import fs from "node:fs";
 
 //#region package.json
 var name = "skydive-cli";
-var version$1 = "0.5.0-beta.36";
+var version$1 = "0.5.0-beta.41";
 
 //#endregion
 //#region src/auth/organization.ts

package/dist/js/{print-DV9L41G2.mjs → print-BAmEefvX.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-h22UbIfZ.mjs";
-import "./rest-ClVPZquN.mjs";
+import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-CwbdwCeQ.mjs";
+import "./rest-Bbe-RhMy.mjs";
 import "./billing-blocked-D3l5kJlX.mjs";
 
 export { messageGet, readStdin, resolveAgent, runPrint };

package/dist/js/{print-h22UbIfZ.mjs → print-CwbdwCeQ.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { t as HttpError } from "./http-error-UHH3mVBF.mjs";
-import { a as isRecord, i as errorMessage, r as sendErrorMessage, t as createRestClient } from "./rest-ClVPZquN.mjs";
+import { a as isRecord, i as errorMessage, r as sendErrorMessage, t as createRestClient } from "./rest-Bbe-RhMy.mjs";
 import { i as billingBlockedOutcomeFromSendResponse, n as BillingBlockedError } from "./billing-blocked-D3l5kJlX.mjs";
 import path from "node:path";
 import Conf from "conf";

package/dist/js/{print-share-BBy3OTno.mjs → print-share-azWHVxpt.mjs}

@@ -14,7 +14,7 @@ import { n as printError } from "./output-wY0VQDea.mjs";
 * the reply (and to --json).
 */
 async function connectMachineShare({ appUrl, sessionToken, timeoutHint }) {
-	const { PortalClient } = await import("./client-yz3zrpAS.mjs");
+	const { PortalClient } = await import("./client-DCwVlAal.mjs");
 	const { defaultTlsCertSource } = await import("./tls-cert-CLgSQALB.mjs");
 	let signalConnected;
 	const connected = new Promise((resolve) => {

package/dist/js/{rest-v-7FQqLP.mjs → rest-B5DVQ1LM.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { t as HttpError } from "./http-error-UHH3mVBF.mjs";
-import { n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-ClVPZquN.mjs";
+import { n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-Bbe-RhMy.mjs";
 import "./billing-blocked-D3l5kJlX.mjs";
 
 export { createRestClient };

package/dist/js/{rest-ClVPZquN.mjs → rest-Bbe-RhMy.mjs}

@@ -299,9 +299,17 @@ function createRestClient({ appUrl, sessionToken, workspaceId }) {
 			} while (cursor && all.length < maxConversations);
 			return limit ? all.slice(0, limit) : all;
 		},
-		listMessages: async ({ conversationId }) => {
-			const { messages } = await get(`/api/v1/conversations/${encodeURIComponent(conversationId)}/messages`, listMessagesResponseSchema);
-			return messages;
+		listMessages: async ({ conversationId, limit, before }) => {
+			const params = new URLSearchParams();
+			if (limit !== void 0) params.set("limit", String(limit));
+			if (before !== void 0) params.set("before", before);
+			const query = params.toString();
+			const { messages, hasMore, nextBefore } = await get(`/api/v1/conversations/${encodeURIComponent(conversationId)}/messages${query ? `?${query}` : ""}`, listMessagesResponseSchema);
+			return {
+				messages,
+				hasMore: hasMore ?? false,
+				nextBefore: nextBefore ?? null
+			};
 		},
 		listWorkspaceFiles: async ({ agentId }) => {
 			const { files } = await get(`/api/v1/workspace-files?${new URLSearchParams({ agentId }).toString()}`, listWorkspaceFilesResponseSchema);
@@ -332,6 +340,9 @@ function createRestClient({ appUrl, sessionToken, workspaceId }) {
 			const { stats } = await get(`/api/v1/compute/live-stats?agentId=${encodeURIComponent(agentId)}`, liveStatsResponseSchema);
 			return stats;
 		},
+		restartAgent: async (agentId) => {
+			await post(`/api/v1/agents/${encodeURIComponent(agentId)}/restart`, {}, z.object({ ok: z.boolean() }));
+		},
 		uploadAttachment: async ({ agentId, fileName, mediaType, data }) => {
 			const size = data.byteLength;
 			const presign = await post("/api/v1/attachments/presign", {
@@ -598,7 +609,11 @@ const liveStatsResponseSchema = z.object({ stats: z.object({
 	diskUsedBytes: z.number(),
 	diskTotalBytes: z.number()
 }).nullable() });
-const listMessagesResponseSchema = z.object({ messages: z.array(uiMessageSchema) });
+const listMessagesResponseSchema = z.object({
+	messages: z.array(uiMessageSchema),
+	hasMore: z.boolean().optional(),
+	nextBefore: z.string().nullish()
+});
 const workspaceFileSchema = z.object({
 	id: z.string(),
 	path: z.string(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skydive-cli",
-  "version": "0.5.0-beta.36",
+  "version": "0.5.0-beta.41",
   "description": "Skydive CLI — cloud agents from the command line",
   "homepage": "https://skydive.com",
   "license": "MIT",
@@ -69,9 +69,9 @@
   },
   "//optionalDependencies": "The per-platform binary packages (skydive-cli-<os>-<arch>) are INTENTIONALLY not committed here. They are published by release-skydive-cli-binaries.yml and injected — pinned to the exact version being published — into the published launcher's optionalDependencies at release time (scripts/prepare-platform-packages.mjs --pin-version, run in release-skydive-cli.yml). Committing them would make `yarn install` try to resolve versions that only exist post-publish, breaking local dev and CI. npm installs of a published skydive-cli still get them (os/cpu-gated); the launcher (src/launcher.ts) resolves and execs the matching one. Local dev never needs them: it runs the JS bundle or `build:binary` directly.",
   "optionalDependencies": {
-    "skydive-cli-darwin-arm64": "0.5.0-beta.36",
-    "skydive-cli-darwin-x64": "0.5.0-beta.36",
-    "skydive-cli-linux-x64": "0.5.0-beta.36",
-    "skydive-cli-linux-arm64": "0.5.0-beta.36"
+    "skydive-cli-darwin-arm64": "0.5.0-beta.41",
+    "skydive-cli-darwin-x64": "0.5.0-beta.41",
+    "skydive-cli-linux-x64": "0.5.0-beta.41",
+    "skydive-cli-linux-arm64": "0.5.0-beta.41"
   }
 }

package/dist/js/client-yz3zrpAS.mjs

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-import { t as PortalClient } from "./client-d6K9qm6B.mjs";
-import "./api-DQCaztBg.mjs";
-
-export { PortalClient };

package/dist/js/daemon-client-CC9sxWac.mjs

@@ -1,8 +0,0 @@
-#!/usr/bin/env node
-import "./client-d6K9qm6B.mjs";
-import "./daemon-CH95gDij.mjs";
-import "./tls-cert-CV-pwxVN.mjs";
-import "./api-DQCaztBg.mjs";
-import { t as PortalDaemonClient } from "./daemon-client-BNDnEGw6.mjs";
-
-export { PortalDaemonClient };