skydive-cli 0.5.0-beta.4 → 0.5.0-beta.44

package/dist/js/bin.mjs

@@ -1,28 +1,31 @@
 #!/usr/bin/env node
-import { C as ensureActiveOrganization, D as setActiveWorkspace, E as listWorkspaces, O as name, T as getSessionIdentity, a as installCrashHandler, k as version, t as maybeStartProfiling, u as brandHelpArt, w as getActiveWorkspaceId, x as themes } from "./profiler-RmWjKIHD.mjs";
-import { A as getStoredApiKeyWorkspaceName, C as getLastSeenVersion, F as resolveManagementAuth, I as resolveSession, M as resolveAppUrl, N as resolveChatAuth, O as getShareMachineDefault, P as resolveConfig, R as saveConfig, S as getConfigPath, T as getPromptHistoryPath, V as setLastSeenVersion, _ as API_KEY_PREFIX, b as PREFERENCES, g as API_KEY_FAMILY_PREFIX, h as API_KEYS_URL, i as resolveAgent, j as getUpdateCheckDisabled, k as getStoredApiKeyId, v as DEFAULT_API_URL, w as getPreference, x as deleteConfig, z as saveSession } from "./print-CbayCa87.mjs";
-import { n as printError, r as printTable, t as output } from "./output-DYzzdXYV.mjs";
-import { t as HttpError } from "./http-error-DzyrsLAZ.mjs";
-import { t as createRestClient } from "./rest-BY2nADw5.mjs";
-import "./billing-blocked-2wju4gC_.mjs";
-import { a as registerPortalDevice, c as resolveMachineIdentity, i as grantPortalAccess, n as fetchPortalDevices, o as revokePortalAccess, r as findThisDevice } from "./client-Dd5sMXPv.mjs";
-import { i as queryDaemonStatus, l as PORTAL_DAEMON_FLAG, n as ensureDaemonRunning, s as stopDaemon, u as daemonPaths } from "./daemon-BYlIJN6x.mjs";
-import { t as SandboxStream } from "./client-Cn2af31H.mjs";
+import { o as name, s as version, t as createRestClient } from "./rest-DpsJUYTL.mjs";
+import { B as resolveSession$1, C as deleteConfig, D as getPreference, E as getLastSeenVersion, G as setLastSeenVersion, H as saveConfig, I as resolveAppUrl, L as resolveChatAuth, M as getStoredApiKeyId, N as getStoredApiKeyWorkspaceName, O as getPromptHistoryPath, P as getUpdateCheckDisabled, R as resolveConfig, S as PREFERENCES, T as getDefaultAgent, U as saveSession, _ as API_KEYS_URL, b as DEFAULT_API_URL, i as resolveAgent$1, j as getShareMachineDefault, v as API_KEY_FAMILY_PREFIX, w as getConfigPath, y as API_KEY_PREFIX, z as resolveManagementAuth } from "./print-Ds16-Q4O.mjs";
+import { A as installAgentAlias, B as resolveWorkspaceId, D as machineOsFromPlatform, E as buildImportSeedPrompt, F as detectShell, I as ensureActiveOrganization, L as getActiveWorkspaceId, M as takenAliasNames, N as SUPPORTED_SHELLS, O as aliasActivationHint, P as defaultInstallEnv, R as getSessionIdentity, V as setActiveWorkspace, c as getAutomaticLogsDir, j as slugifyAliasName, k as dedupeAliasName, l as maybeStartProfiling, o as brandHelpArt, t as installCrashHandler, u as profileDir, w as themes, z as listWorkspaces } from "./install-DrtNldUN.mjs";
+import { n as printError, r as printTable, t as output } from "./output-C9mb3sUB.mjs";
+import { t as HttpError } from "./http-error-BF2NZZE3.mjs";
+import "./billing-blocked-D3l5kJlX.mjs";
+import { r as resolveMachineIdentity } from "./client-BnpgrtCC.mjs";
+import { i as queryDaemonStatus, l as PORTAL_DAEMON_FLAG, n as ensureDaemonRunning, s as stopDaemon, u as daemonPaths } from "./daemon-w8vtZ81t.mjs";
+import "./tls-cert-CV-pwxVN.mjs";
+import { i as grantPortalAccess, n as fetchPortalDevices, o as registerPortalDevice, r as findThisDevice, s as revokePortalAccess } from "./api-TwLD7ibI.mjs";
+import { a as encodeFsRequest, i as decodeFsResponse, n as SANDBOX_STREAM_PATH, r as streamSpecToQuery, t as SandboxStream } from "./client-Btq6bMzX.mjs";
 import { hideBin } from "yargs/helpers";
 import yargs from "yargs";
-import os, { hostname, tmpdir } from "node:os";
+import { hostname, tmpdir } from "node:os";
 import path, { join } from "node:path";
 import { err, ok } from "neverthrow";
 import { z } from "zod";
 import open from "open";
 import fs from "node:fs";
 import { spawn, spawnSync } from "node:child_process";
-import { createHash, randomBytes } from "node:crypto";
+import { createHash } from "node:crypto";
 import zlib from "node:zlib";
 import fsp, { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
-import { quote } from "shell-quote";
+import { WebSocket } from "ws";
 import semver from "semver";
 import { createInterface } from "node:readline";
+import { createInterface as createInterface$1 } from "node:readline/promises";
 
 //#region src/types.ts
 const NON_INTERACTIVE_ENV_VARS = [
@@ -38,6 +41,7 @@ function isNonInteractive() {
 //#endregion
 //#region src/api-client.ts
 const USER_AGENT = `skydive-cli/${version}`;
+const CLI_VERSION_HEADER = "x-skydive-cli-version";
 /** Largest page `/v1/agents` will return, enforced server-side. */
 const MAX_AGENT_PAGE = 100;
 const AgentSchema = z.object({
@@ -69,10 +73,12 @@ var SkydiveApiClient = class {
 	baseUrl;
 	token;
 	authKind;
+	workspaceId;
 	constructor(config) {
 		this.baseUrl = `${config.apiUrl.replace(/\/$/, "")}/v1`;
 		this.token = config.token;
 		this.authKind = config.kind;
+		this.workspaceId = config.workspaceId;
 	}
 	/**
 	* List one page of agents in the caller's workspace. The server caps a
@@ -156,8 +162,10 @@ var SkydiveApiClient = class {
 		const url = `${this.baseUrl}${params.path}`;
 		const headers = {
 			authorization: `Bearer ${this.token}`,
-			"user-agent": USER_AGENT
+			"user-agent": USER_AGENT,
+			[CLI_VERSION_HEADER]: version
 		};
+		if (this.workspaceId) headers["x-workspace-id"] = this.workspaceId;
 		if (params.body) headers["content-type"] = "application/json";
 		let response;
 		try {
@@ -615,7 +623,7 @@ const logoutCommand = {
 		const keyId = getStoredApiKeyId();
 		let keyRevoked = false;
 		if (keyId) {
-			const session = resolveSession({ appUrl: argv["api-url"] });
+			const session = resolveSession$1({ appUrl: argv["api-url"] });
 			const config = resolveConfig({ apiUrl: argv["api-url"] });
 			const credential = session.isOk() ? {
 				appUrl: session.value.appUrl,
@@ -646,7 +654,7 @@ const statusCommand$1 = {
 	describe: "Show current authentication state",
 	handler: async (argv) => {
 		const apiKey = resolveConfig({ apiUrl: argv["api-url"] });
-		const session = resolveSession({});
+		const session = resolveSession$1({});
 		const management = resolveManagementAuth({ apiUrl: argv["api-url"] });
 		const identity = session.isOk() ? (await getSessionIdentity({
 			appUrl: session.value.appUrl,
@@ -717,11 +725,6 @@ const authCommand = {
 * matches on it to keep notices off the user's prompt (see isCompletionProbe).
 */
 const COMPLETION_PROBE_FLAG = "--get-yargs-completions";
-const SUPPORTED_SHELLS = [
-	"bash",
-	"zsh",
-	"fish"
-];
 /**
 * True when this invocation is a shell asking for completion candidates
 * rather than a user running a command. Such a run must print candidates and
@@ -893,24 +896,6 @@ complete -c ${name} -f -k -a '(${fn})'
 ${blockEnd(name)}
 `;
 }
-const defaultInstallEnv = () => ({
-	home: os.homedir(),
-	platform: process.platform,
-	env: process.env,
-	exists: fs.existsSync
-});
-/**
-* The shell to install for when the user didn't name one. `$SHELL` is the
-* only signal available: a completion install runs as a child process, so the
-* invoking shell's own variables (`$ZSH_VERSION`, `$FISH_VERSION`) aren't
-* visible here.
-*/
-function detectShell(env = process.env) {
-	const shell = env["SHELL"];
-	if (!shell) return null;
-	const name = path.basename(shell);
-	return SUPPORTED_SHELLS.find((candidate) => name === candidate) ?? null;
-}
 function completionTarget(shell, deps = defaultInstallEnv()) {
 	const { home, platform, env, exists } = deps;
 	if (shell === "fish") {
@@ -1019,7 +1004,7 @@ const completionCommand = {
 * resolve-or-exit block isn't copy-pasted per command.
 */
 function requireSession(argv) {
-	const session = resolveSession({ appUrl: resolveAppUrl({ appUrl: argv["api-url"] }) });
+	const session = resolveSession$1({ appUrl: resolveAppUrl({ appUrl: argv["api-url"] }) });
 	if (session.isErr()) {
 		printError(`${session.error.message} Run \`skydive auth login\` first, or set SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
@@ -1031,7 +1016,7 @@ function requireSession(argv) {
 * {@link resolveManagementAuth}) or exit with a friendly hint, then build the
 * `/v1` client. Shared by `agents`, `keys` and `secrets`.
 */
-function requireManagementClient(argv) {
+function requireManagementClient(argv, opts = {}) {
 	const auth = resolveManagementAuth({ apiUrl: argv["api-url"] });
 	if (auth.isErr()) {
 		printError(auth.error.message);
@@ -1039,7 +1024,10 @@ function requireManagementClient(argv) {
 	}
 	if (auth.value.kind === "api-key" && auth.value.pinnedWorkspaceName) process.stderr.write(`Using this machine's API key, which always acts in the "${auth.value.pinnedWorkspaceName}" workspace (even after \`workspace switch\`). Run \`skydive auth login\` to change that.
 `);
-	return new SkydiveApiClient(auth.value);
+	return new SkydiveApiClient({
+		...auth.value,
+		...opts.workspaceId ? { workspaceId: opts.workspaceId } : {}
+	});
 }
 /** Resolve the session (see {@link requireSession}) and build a REST client. */
 function requireRestClient(argv) {
@@ -1056,7 +1044,32 @@ function requireRestClient(argv) {
 
 //#endregion
 //#region src/commands/agents.ts
-const listCommand$5 = {
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/**
+* Resolve an agent from an id or a name. A uuid selector hits `GET
+* /agents/:id` directly; anything else is matched case-insensitively against
+* the roster's names. Ambiguity is an error rather than a silent pick, so an
+* alias never lands on the wrong agent.
+*/
+async function resolveAgent(client, selector) {
+	if (UUID_RE.test(selector)) {
+		const result = await client.getAgent(selector);
+		if (result.isErr()) throw new Error(result.error.message);
+		return result.value;
+	}
+	const list = await client.listAgents({
+		scope: "org",
+		limit: 100
+	});
+	if (list.isErr()) throw new Error(list.error.message);
+	const needle = selector.trim().toLowerCase();
+	const matches = list.value.agents.filter((a) => a.name.toLowerCase() === needle);
+	const [first] = matches;
+	if (matches.length === 1 && first) return first;
+	if (matches.length === 0) throw new Error(`No agent named "${selector}". Pass an id, or run \`skydive agents list\`.`);
+	throw new Error(`Multiple agents named "${selector}". Pass the id instead:\n${matches.map((a) => `  ${a.name}  ${a.id}`).join("\n")}`);
+}
+const listCommand$6 = {
 	command: "list",
 	describe: "List agents in the active workspace",
 	builder: (y) => y.option("limit", {
@@ -1205,10 +1218,82 @@ const createCommand$1 = {
 		if (agent.url) console.log(`  API:  ${agent.url}`);
 	}
 };
+/**
+* Resolve the `--workspace` selector (slug/name/id) to a workspace, using the
+* chat/session credential (workspace listing is a session endpoint). Exits
+* with a clear message on a bad selector or when listing isn't available
+* (e.g. a pinned API key). Returns null when the flag is absent.
+*/
+async function resolveAliasWorkspace(argv) {
+	if (!argv.workspace) return null;
+	const auth = resolveChatAuth({ appUrl: resolveAppUrl({ appUrl: argv["api-url"] }) });
+	if (auth.isErr()) {
+		printError(`${auth.error.message} Run \`skydive auth login\` to resolve a workspace by name.`);
+		process.exit(1);
+	}
+	const resolved = await resolveWorkspaceId({
+		appUrl: auth.value.appUrl,
+		sessionToken: auth.value.token,
+		selector: argv.workspace
+	});
+	if (resolved.isErr()) {
+		printError(resolved.error.message);
+		process.exit(1);
+	}
+	return resolved.value;
+}
+const aliasCommand = {
+	command: "alias <agent> [name]",
+	describe: "Add a shell alias that opens an agent's chat",
+	builder: (y) => y.positional("agent", {
+		type: "string",
+		demandOption: true,
+		describe: "Agent id or name to alias"
+	}).positional("name", {
+		type: "string",
+		describe: "Alias to use (default: derived from the agent name)"
+	}).option("shell", {
+		type: "string",
+		choices: SUPPORTED_SHELLS,
+		describe: "Shell to install for (default: $SHELL)"
+	}).option("workspace", {
+		type: "string",
+		describe: "Workspace the agent lives in (slug, name, or id). Scopes the lookup to it and pins it in the alias, so the alias opens the right agent even when it isn't your active workspace."
+	}).example("skydive agents alias Ripple", "alias `ripple` -> that agent").example("skydive agents alias Ripple rip", "use a custom alias token").example("skydive agents alias Ripple --workspace acme", "pin the workspace in the alias"),
+	handler: async (argv) => {
+		const shell = argv.shell ? SUPPORTED_SHELLS.find((s) => s === argv.shell) : detectShell();
+		if (!shell) throw new Error(argv.shell ? `Unsupported shell "${argv.shell}". Supported: ${SUPPORTED_SHELLS.join(", ")}.` : `Could not tell which shell to use from $SHELL. Name one with --shell (${SUPPORTED_SHELLS.join(", ")}).`);
+		const workspace = await resolveAliasWorkspace(argv);
+		const agent = await resolveAgent(requireManagementClient(argv, { workspaceId: workspace?.id }), argv.agent);
+		const preferred = argv.name ? slugifyAliasName(argv.name) : slugifyAliasName(agent.name);
+		const alias = dedupeAliasName(preferred, takenAliasNames(shell));
+		const result = installAgentAlias({
+			alias,
+			agentId: agent.id,
+			shell,
+			...workspace ? { workspaceId: workspace.id } : {}
+		}, void 0);
+		if (argv.json) {
+			output(argv, {
+				...result,
+				workspace: workspace ?? null
+			});
+			return;
+		}
+		if (argv.quiet) {
+			console.log(result.alias);
+			return;
+		}
+		const where = workspace ? ` (workspace ${workspace.name})` : "";
+		console.log(`${result.updated ? "Updated" : "Added"} alias \`${result.alias}\` -> ${agent.name}${where} in ${result.path}`);
+		if (alias !== preferred) console.log(`(\`${preferred}\` was taken, so used \`${alias}\`.)`);
+		console.log(aliasActivationHint(result));
+	}
+};
 const agentsCommand = {
 	command: "agents",
 	describe: "Manage agents",
-	builder: (y) => y.command(listCommand$5).command(getCommand$2).command(createCommand$1).demandCommand(1, "Specify a subcommand: list, get, create"),
+	builder: (y) => y.command(listCommand$6).command(getCommand$2).command(createCommand$1).command(aliasCommand).demandCommand(1, "Specify a subcommand: list, get, create, alias"),
 	handler: () => {}
 };
 
@@ -1462,19 +1547,6 @@ function ensureBunAndReexec(onProgress) {
 
 //#endregion
 //#region src/commands/import.ts
-/**
-* The first message of the import conversation, sent as the user. It hands
-* the real work to the agent's `import-config` skill; this text only needs
-* to establish intent, anchor the starting directory, and set the two
-* expectations the user cares about most (plan first, no credentials).
-*/
-function buildImportSeedPrompt(projectDir) {
-	return [
-		"I'm migrating from another coding agent. Import my setup from this machine.",
-		"",
-		`Use your import-config skill. I ran this from \`${projectDir}\`, so start there and in my home directory. Don't assume one tool — do the discovery sweep so you catch whatever I actually use (Claude Code, Cursor, Codex, Gemini CLI, Copilot, Windsurf, Cline, OpenCode, Aider, and any nested AGENTS.md). Show me the plan first: everything you found, what you'll bring over, where it lands in you, and anything you're leaving out (credentials especially). Then wait for my OK before committing anything.`
-	].join("\n");
-}
 const importCommand = {
 	command: "import",
 	describe: "Import your existing coding-agent setup (Claude Code, Cursor, Codex, Gemini, Copilot, and more) into an agent (opens a machine-shared chat)",
@@ -1503,30 +1575,33 @@ const importCommand = {
 			printError(`import needs the Bun runtime and it couldn't be set up automatically. Install Bun (https://bun.sh) and run \`bun ${process.argv[1] ?? "skydive"} import\`, point SKYDIVE_BUN_PATH at an existing bun binary, or use the non-interactive \`import -p\` (runs under Node).`);
 			process.exit(1);
 		}
-		let session = resolveSession({ appUrl });
+		let session = resolveSession$1({ appUrl });
 		if (session.isErr()) {
 			const login = await loginWithDevice({ appUrl });
 			if (login.isErr()) {
 				printError(login.error.message);
 				process.exit(1);
 			}
-			session = resolveSession({ appUrl });
+			session = resolveSession$1({ appUrl });
 			if (session.isErr()) {
 				printError("Signed in, but no session was stored.");
 				process.exit(1);
 			}
 		}
-		const { runChat } = await import("./boot-B_93T51X.mjs");
+		const { runChat } = await import("./boot-ClKjP9Mn.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
+			workspaceId: void 0,
 			shareMachine: true,
 			promptHistoryPath: getPromptHistoryPath(),
 			notifications: true,
 			agentSelector: argv.agent ?? null,
 			conversationId: null,
 			newConversation: false,
-			seedPrompt: buildImportSeedPrompt(process.cwd())
+			defaultAgentSelector: getDefaultAgent(),
+			forceOnboarding: false,
+			seedPrompt: buildImportSeedPrompt(process.cwd(), machineOsFromPlatform(process.platform))
 		});
 	}
 };
@@ -1538,20 +1613,20 @@ const importCommand = {
 * (`chat -p "go ahead" --resume <id> --share-machine`) to apply it.
 */
 async function runImportPrintMode({ argv, appUrl }) {
-	const session = resolveSession({ appUrl });
+	const session = resolveSession$1({ appUrl });
 	if (session.isErr()) {
 		printError(`${session.error.message} For non-interactive use, run \`skydive auth login --web\` first, or set SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { connectMachineShare } = await import("./print-share-uwUG16Ov.mjs");
+	const { connectMachineShare } = await import("./print-share-Df6eAG12.mjs");
 	const machineShare = await connectMachineShare({
 		appUrl,
 		sessionToken: session.value.sessionToken,
 		timeoutHint: "Check `skydive portal status`, then re-run."
 	});
 	const extra = (argv.print ?? "").trim();
-	const prompt = buildImportSeedPrompt(process.cwd()) + (extra ? `\n\nAdditional instructions: ${extra}` : "");
-	const { runPrint } = await import("./print-ba_0hiV9.mjs");
+	const prompt = buildImportSeedPrompt(process.cwd(), machineOsFromPlatform(process.platform)) + (extra ? `\n\nAdditional instructions: ${extra}` : "");
+	const { runPrint } = await import("./print-Dc-xRapT.mjs");
 	try {
 		const result = await runPrint({
 			appUrl,
@@ -1575,7 +1650,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 
 //#endregion
 //#region src/commands/keys.ts
-const listCommand$4 = {
+const listCommand$5 = {
 	command: "list",
 	describe: "List API keys for an agent",
 	handler: async (argv) => {
@@ -1664,7 +1739,7 @@ const keysCommand = {
 		type: "string",
 		demandOption: true,
 		describe: "Agent ID"
-	}).command(listCommand$4).command(createCommand).command(revokeCommand$1).demandCommand(1, "Specify a subcommand: list, create, revoke"),
+	}).command(listCommand$5).command(createCommand).command(revokeCommand$1).demandCommand(1, "Specify a subcommand: list, create, revoke"),
 	handler: () => {}
 };
 
@@ -1676,7 +1751,7 @@ async function readStdin() {
 	for await (const chunk of process.stdin) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
 	return Buffer.concat(chunks).toString("utf8").replace(/\n$/, "");
 }
-const listCommand$3 = {
+const listCommand$4 = {
 	command: "list",
 	describe: "List secret names for an agent (values are never shown)",
 	handler: async (argv) => {
@@ -1762,7 +1837,7 @@ const secretsCommand = {
 		type: "string",
 		demandOption: true,
 		describe: "Agent ID"
-	}).command(listCommand$3).command(setCommand$1).command(rmCommand).demandCommand(1, "Specify a subcommand: list, set, rm"),
+	}).command(listCommand$4).command(setCommand$1).command(rmCommand).demandCommand(1, "Specify a subcommand: list, set, rm"),
 	handler: () => {}
 };
 
@@ -1859,6 +1934,24 @@ async function resolveAgentWorkspace({ appUrl, sessionToken, agentSelector }) {
 
 //#endregion
 //#region src/commands/chat.ts
+/**
+* Resolve the `--workspace` selector to an id, or undefined when the flag is
+* absent. A bad selector is fatal — a chat scoped to the wrong (or a
+* nonexistent) workspace is worse than failing fast with how to list them.
+*/
+async function resolveWorkspaceFlag({ appUrl, sessionToken, selector }) {
+	if (!selector) return void 0;
+	const resolved = await resolveWorkspaceId({
+		appUrl,
+		sessionToken,
+		selector
+	});
+	if (resolved.isErr()) {
+		printError(resolved.error.message);
+		process.exit(1);
+	}
+	return resolved.value.id;
+}
 const chatCommand = {
 	command: "chat",
 	describe: "Open the interactive chat TUI, or -p for a one-shot",
@@ -1869,6 +1962,9 @@ const chatCommand = {
 	}).option("agent", {
 		type: "string",
 		describe: "Target agent, by id, slug, or name. With -p, the agent to send the one-shot prompt to. Without -p, pre-selects the agent and opens its conversation list, skipping the agent picker. Optional when the account has exactly one agent."
+	}).option("workspace", {
+		type: "string",
+		describe: "Scope this chat to a workspace, by slug, name, or id. Every request for this invocation is scoped to it (no persistent switch of your active workspace), so a slug/name --agent resolves inside it and the roster is that workspace. Useful in an alias for an agent that lives in a workspace other than your active one."
 	}).option("conversation", {
 		alias: "resume",
 		type: "string",
@@ -1877,6 +1973,10 @@ const chatCommand = {
 		type: "boolean",
 		default: false,
 		describe: "Start a fresh conversation instead of opening the conversation list. With --agent, opens a new conversation with that agent directly. Without --agent, opens a new conversation once you pick an agent (auto-picked if the account has only one). Ignored with --resume, which always continues the named conversation."
+	}).option("onboarding", {
+		type: "boolean",
+		default: false,
+		describe: "Force the first-run onboarding flow (auto-create a first agent, then offer the machine import) even when the workspace already has agents. Also settable via SKYDIVE_FORCE_ONBOARDING=1. Handy for replaying the new-user experience; ignored with -p, --resume, or --agent."
 	}).option("share-machine", {
 		type: "boolean",
 		describe: "Share this machine with the agent over the portal so it can run commands here (default-deny; in the TUI you approve per agent, with -p the flag grants the target agent for the run). Defaults to `shareMachineDefault` in the CLI config file; --no-share-machine disables for this invocation."
@@ -1918,21 +2018,27 @@ const chatCommand = {
 				process.exit(1);
 			}
 		}
+		const workspaceId = await resolveWorkspaceFlag({
+			appUrl,
+			sessionToken: auth.value.token,
+			selector: argv.workspace
+		});
 		const themeId = argv.theme ?? process.env["SKYDIVE_THEME"] ?? void 0;
 		if (themeId !== void 0 && !themes.some((t) => t.id === themeId)) {
 			printError(`Unknown theme "${themeId}". Valid themes: ${themes.map((t) => t.id).join(", ")}`);
 			process.exit(1);
 		}
-		await ensureAgentWorkspace({
+		if (!workspaceId) await ensureAgentWorkspace({
 			appUrl,
 			sessionToken: auth.value.token,
 			agentSelector: argv.agent ?? null
 		});
-		const { runChat } = await import("./boot-B_93T51X.mjs");
+		const { runChat } = await import("./boot-ClKjP9Mn.mjs");
 		await runChat({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
 			authKind: auth.value.kind,
+			workspaceId,
 			shareMachine: resolveShareMachine(argv),
 			promptHistoryPath: getPromptHistoryPath(),
 			theme: themeId,
@@ -1940,6 +2046,8 @@ const chatCommand = {
 			agentSelector: argv.agent ?? null,
 			conversationId: argv.conversation ?? null,
 			newConversation: resolveNewConversation(argv),
+			forceOnboarding: resolveForceOnboarding(argv),
+			defaultAgentSelector: getDefaultAgent(),
 			seedPrompt: null
 		});
 	}
@@ -1961,6 +2069,20 @@ function resolveNewConversation(argv) {
 	return argv.new === true && !argv.conversation;
 }
 /**
+* Whether to force the first-run onboarding flow: the `--onboarding` flag or
+* `SKYDIVE_FORCE_ONBOARDING` (any non-empty, non-"0"/"false" value). Lets the
+* new-user experience be replayed in a workspace that already has agents. The
+* TUI applies it only to a bare interactive launch — an explicit
+* `--agent`/`--resume`/`--new` still takes precedence.
+*/
+function resolveForceOnboarding(argv, env = process.env) {
+	if (argv.onboarding === true) return true;
+	const raw = env["SKYDIVE_FORCE_ONBOARDING"];
+	if (raw === void 0) return false;
+	const value = raw.trim().toLowerCase();
+	return value !== "" && value !== "0" && value !== "false";
+}
+/**
 * Cross-workspace `--agent <uuid>` handling shared by the TUI and -p paths:
 * on a hit in another workspace, switch to it and say so on stderr (stdout
 * may carry the -p reply/JSON envelope); when the id matches no workspace on
@@ -1995,8 +2117,13 @@ async function runPrintMode({ argv, appUrl }) {
 		printError(`${auth.error.message} For non-interactive use, run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { runPrint, readStdin } = await import("./print-ba_0hiV9.mjs");
-	await ensureAgentWorkspace({
+	const { runPrint, readStdin } = await import("./print-Dc-xRapT.mjs");
+	const workspaceId = await resolveWorkspaceFlag({
+		appUrl,
+		sessionToken: auth.value.token,
+		selector: argv.workspace
+	});
+	if (!workspaceId) await ensureAgentWorkspace({
 		appUrl,
 		sessionToken: auth.value.token,
 		agentSelector: argv.agent ?? null
@@ -2020,7 +2147,7 @@ async function runPrintMode({ argv, appUrl }) {
 			process.exit(1);
 		}
 	} else {
-		const { connectMachineShare } = await import("./print-share-uwUG16Ov.mjs");
+		const { connectMachineShare } = await import("./print-share-Df6eAG12.mjs");
 		machineShare = await connectMachineShare({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -2031,6 +2158,7 @@ async function runPrintMode({ argv, appUrl }) {
 		const result = await runPrint({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
+			workspaceId,
 			prompt,
 			agentSelector: argv.agent ?? null,
 			conversationId: argv.conversation ?? null,
@@ -2040,7 +2168,7 @@ async function runPrintMode({ argv, appUrl }) {
 		});
 		if (argv.json) output(argv, result);
 	} catch (error) {
-		const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-Dgu5-oDy.mjs");
+		const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-SE6tySLd.mjs");
 		if (error instanceof BillingBlockedError) {
 			if (argv.json) output(argv, billingBlockedJsonResult(error, null));
 			printError(error.message);
@@ -2084,7 +2212,7 @@ const getCommand$1 = {
 			printError(`${auth.error.message} Run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 			process.exit(1);
 		}
-		const { messageGet } = await import("./print-ba_0hiV9.mjs");
+		const { messageGet } = await import("./print-Dc-xRapT.mjs");
 		try {
 			const result = await messageGet({
 				appUrl: auth.value.appUrl,
@@ -2094,7 +2222,7 @@ const getCommand$1 = {
 			});
 			if (argv.json) output(argv, result);
 		} catch (error) {
-			const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-Dgu5-oDy.mjs");
+			const { BillingBlockedError, BILLING_BLOCKED_EXIT_CODE, billingBlockedJsonResult } = await import("./billing-blocked-SE6tySLd.mjs");
 			if (error instanceof BillingBlockedError) {
 				if (argv.json) output(argv, billingBlockedJsonResult(error, argv["message-id"]));
 				printError(error.message);
@@ -2131,7 +2259,7 @@ function messageToText(message) {
 	}
 	return chunks.join("\n").trim();
 }
-const listCommand$2 = {
+const listCommand$3 = {
 	command: "list",
 	describe: "List an agent's conversations",
 	builder: (y) => y.option("agent", {
@@ -2143,7 +2271,7 @@ const listCommand$2 = {
 	}),
 	handler: async (argv) => {
 		const client = requireRestClient(argv);
-		const agent = resolveAgent(await client.listAgents({
+		const agent = resolveAgent$1(await client.listAgents({
 			scope: "org",
 			onPage: null
 		}), argv.agent ?? null);
@@ -2200,7 +2328,7 @@ const showCommand = {
 			console.log(recap ?? "(no recap available)");
 			return;
 		}
-		const messages = await client.listMessages({ conversationId });
+		const { messages } = await client.listMessages({ conversationId });
 		if (argv.json) {
 			output(argv, messages);
 			return;
@@ -2221,7 +2349,7 @@ const conversationsCommand = {
 	command: "conversations",
 	aliases: ["conv"],
 	describe: "List and read agent conversations",
-	builder: (y) => y.command(listCommand$2).command(showCommand).demandCommand(1, "Specify a subcommand: list, show"),
+	builder: (y) => y.command(listCommand$3).command(showCommand).demandCommand(1, "Specify a subcommand: list, show"),
 	handler: () => {}
 };
 
@@ -2263,7 +2391,7 @@ async function runList(argv, { hint }) {
 	]));
 	if (hint && !argv.quiet) console.log("\nRun `skydive workspace switch` to pick a workspace, or pass its slug directly.");
 }
-const listCommand$1 = {
+const listCommand$2 = {
 	command: "list",
 	describe: "List workspaces on your account",
 	handler: (argv) => runList(argv, { hint: false })
@@ -2287,7 +2415,7 @@ const switchCommand = {
 				printError("The workspace picker needs the Bun runtime and it could not be set up automatically. Pass a workspace slug instead, or install Bun and retry.");
 				process.exit(1);
 			}
-			const { runWorkspacePicker } = await import("./boot-B_93T51X.mjs");
+			const { runWorkspacePicker } = await import("./boot-ClKjP9Mn.mjs");
 			await runWorkspacePicker(session);
 			return;
 		}
@@ -2320,7 +2448,7 @@ const switchCommand = {
 const workspaceCommand = {
 	command: "workspace",
 	describe: "List or switch the workspace all `skydive` commands act on",
-	builder: (y) => y.command(listCommand$1).command(switchCommand),
+	builder: (y) => y.command(listCommand$2).command(switchCommand),
 	handler: (argv) => runList(argv, { hint: true })
 };
 
@@ -2336,10 +2464,10 @@ const workspaceCommand = {
 */
 async function resolveGrantTarget(argv) {
 	const session = requireSession(argv);
-	const [{ devices, agents }, identity] = await Promise.all([fetchPortalDevices(session), resolveMachineIdentity()]);
+	const [{ devices, agents }, identity] = await Promise.all([fetchPortalDevices(session), resolveMachineIdentity(null)]);
 	return {
 		session,
-		agent: resolveAgent(agents, argv.agent),
+		agent: resolveAgent$1(agents, argv.agent),
 		device: findThisDevice(devices, identity.machineName),
 		identity
 	};
@@ -2363,10 +2491,10 @@ const openCommand = {
 	}),
 	handler: async (argv) => {
 		const session = requireSession(argv);
-		const agent = argv.agent ? resolveAgent((await fetchPortalDevices(session)).agents, argv.agent) : null;
+		const agent = argv.agent ? resolveAgent$1((await fetchPortalDevices(session)).agents, argv.agent) : null;
 		const cwd = argv.cwd ? path.resolve(argv.cwd) : process.cwd();
-		const { machineName } = await resolveMachineIdentity();
-		const { PortalDaemonClient } = await import("./daemon-client-Z4Ce4zf-.mjs");
+		const { machineName } = await resolveMachineIdentity(null);
+		const { PortalDaemonClient } = await import("./daemon-client-D5YCk5Hc.mjs");
 		let lastLine = "";
 		let signalConnected;
 		const connected = new Promise((resolve) => {
@@ -2395,7 +2523,7 @@ const openCommand = {
 		client.enable();
 		await connected;
 		if (agent) {
-			await client.grantAgent(agent.id);
+			await client.grantAgent(agent.id, null);
 			console.log(`portal: granted ${agent.name} access to this machine (persists until revoked)`);
 		}
 		console.log(`portal: open. granted agents can run commands on ${machineName} as your user, cwd ${cwd}. ctrl+c to close.`);
@@ -2415,7 +2543,8 @@ const grantCommand = {
 		})).id;
 		await grantPortalAccess(session, {
 			deviceId,
-			agentId: agent.id
+			agentId: agent.id,
+			conversationId: null
 		});
 		if (argv.json) {
 			output(argv, {
@@ -2424,7 +2553,7 @@ const grantCommand = {
 			});
 			return;
 		}
-		console.log(`Granted ${agent.name} access to ${device?.friendlyName ?? friendlyName}. The agent can run commands here whenever its portal is open. Start with \`skydive portal open\`, or pass \`--share-machine\` on a \`chat -p\` run. Revoke with \`skydive portal revoke --agent ${agent.name}\`.`);
+		console.log(`Granted ${agent.name} access to ${device?.friendlyName ?? friendlyName}. The agent can run commands here whenever its portal is open. Start with \`skydive portal open\`, or pass \`--share-machine\` on a \`chat -p\` run. Revoke with \`skydive portal revoke --agent "${agent.name}"\`.`);
 	}
 };
 const revokeCommand = {
@@ -2464,7 +2593,7 @@ const statusCommand = {
 			console.log("No machines registered. Run `skydive portal open` to register this one.");
 			return;
 		}
-		const { headers, rows } = buildDeviceTable(devices, agents, (await resolveMachineIdentity()).machineName);
+		const { headers, rows } = buildDeviceTable(devices, agents, (await resolveMachineIdentity(null)).machineName);
 		printTable(headers, rows);
 	}
 };
@@ -2592,17 +2721,56 @@ const daemonCommand = {
 	builder: (y) => y.command(daemonStatusCommand).command(daemonStopCommand).command(daemonStartCommand).command(daemonRestartCommand).command(daemonLogsCommand).demandCommand(1, "Specify a subcommand: status, stop, start, restart, logs"),
 	handler: () => {}
 };
+const forwardCommand = {
+	command: "forward <port>",
+	describe: "Forward localhost:<port> to the agent sandbox's port, so a dev server running in the sandbox is reachable at http://localhost:<port> (stays in the foreground; ctrl+c to stop)",
+	builder: (y) => y.positional("port", {
+		type: "number",
+		demandOption: true,
+		describe: "Sandbox port to forward to (e.g. 3000 for a dev server)"
+	}).option("agent", {
+		type: "string",
+		describe: "Agent, by id or name (defaults when the account has one)"
+	}).option("local-port", {
+		type: "number",
+		describe: "Local port to listen on (default: same as <port>)"
+	}),
+	handler: async (argv) => {
+		const session = requireSession(argv);
+		const agent = resolveAgent$1((await fetchPortalDevices(session)).agents, argv.agent ?? null);
+		const targetPort = argv.port;
+		const localPort = argv["local-port"] ?? targetPort;
+		const { startForward } = await import("./forward-Ct8Vd2WW.mjs");
+		const { defaultTlsCertSource } = await import("./tls-cert-CLgSQALB.mjs");
+		const log = (msg) => console.error(msg);
+		const listener = await startForward({
+			auth: session,
+			agentId: agent.id,
+			localPort,
+			targetPort,
+			tlsCertSource: defaultTlsCertSource(process.env, log),
+			log
+		});
+		console.log(`Forwarding http://localhost:${listener.port} -> ${agent.name}'s sandbox port ${targetPort}. ctrl+c to stop.`);
+		if (listener.tls) console.log(`           https://${listener.tls.hostname}:${listener.tls.port} (TLS — browsers negotiate HTTP/2 here, which loads module-heavy dev servers much faster)`);
+		await new Promise((resolve) => {
+			process.once("SIGINT", () => resolve());
+			process.once("SIGTERM", () => resolve());
+		});
+		await listener.close();
+	}
+};
 const portalCommand = {
 	command: "portal",
 	describe: "Open this machine's portal to agents and manage their access",
-	builder: (y) => y.command(openCommand).command(grantCommand).command(revokeCommand).command(statusCommand).command(daemonCommand).demandCommand(1, "Specify a subcommand: open, grant, revoke, status, daemon"),
+	builder: (y) => y.command(openCommand).command(grantCommand).command(revokeCommand).command(statusCommand).command(forwardCommand).command(daemonCommand).demandCommand(1, "Specify a subcommand: open, grant, revoke, status, forward, daemon"),
 	handler: () => {}
 };
 
 //#endregion
 //#region src/commands/sandbox.ts
 /** POSIX single-quote one word so the remote shell treats it as one token. */
-function shellQuote$1(word) {
+function shellQuote(word) {
 	if (/^[A-Za-z0-9_@%+=:,./-]+$/.test(word)) return word;
 	return `'${word.replace(/'/g, `'\\''`)}'`;
 }
@@ -2617,7 +2785,7 @@ function shellQuote$1(word) {
 * for too. yargs number-coerces bare numerals, so words are stringified.
 */
 function joinCommandWords(words) {
-	return words.map(String).map(shellQuote$1).join(" ").trim();
+	return words.map(String).map(shellQuote).join(" ").trim();
 }
 /**
 * `skydive sandbox` — the standalone counterpart to the chat TUI's `/sandbox`
@@ -2640,8 +2808,8 @@ const sandboxCommand = {
 	}).example("skydive sandbox --agent grace", "Live terminal (Ctrl-] detaches)").example("skydive sandbox --agent grace -- tail -n 50 /tmp/harness.log", "One-shot command (use `--` so its flags reach the sandbox)").example("skydive sandbox --agent grace -- sh -c 'ls /tmp | wc -l'", "Shell features go through an explicit `sh -c`"),
 	handler: async (argv) => {
 		const session = requireSession(argv);
-		const { createRestClient } = await import("./rest-DADJh0bi.mjs");
-		const { resolveAgent } = await import("./print-ba_0hiV9.mjs");
+		const { createRestClient } = await import("./rest-Do3mPVpC.mjs");
+		const { resolveAgent } = await import("./print-Dc-xRapT.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken
@@ -2710,7 +2878,7 @@ async function runPty({ session, agentId, agentName }) {
 		return 1;
 	}
 	console.error(`Connecting to ${agentName}'s sandbox… (Ctrl-] detaches)`);
-	const { runRawPtyPassthrough } = await import("./raw-pty-3EkG-jjH.mjs");
+	const { runRawPtyPassthrough } = await import("./raw-pty-Ci2qFR9F.mjs");
 	const result = await runRawPtyPassthrough({
 		stdin: process.stdin,
 		stdout: process.stdout,
@@ -2722,40 +2890,151 @@ async function runPty({ session, agentId, agentName }) {
 	return result.code;
 }
 
+//#endregion
+//#region src/chat/sandbox/fs-client.ts
+function wsBase(appUrl) {
+	const base = appUrl.replace(/\/+$/, "");
+	if (base.startsWith("https://")) return `wss://${base.slice(8)}`;
+	if (base.startsWith("http://")) return `ws://${base.slice(7)}`;
+	return `wss://${base}`;
+}
+function toU8(data) {
+	if (Buffer.isBuffer(data)) return new Uint8Array(data);
+	if (Array.isArray(data)) return new Uint8Array(Buffer.concat(data));
+	return new Uint8Array(Buffer.from(data));
+}
+var SandboxFsClient = class SandboxFsClient {
+	ws;
+	ready;
+	nextReqId = 1;
+	pending = /* @__PURE__ */ new Map();
+	closedReason = null;
+	constructor(opts) {
+		const spec = {
+			mode: "fs",
+			agentId: opts.agentId
+		};
+		const url = new URL(`${wsBase(opts.appUrl)}${SANDBOX_STREAM_PATH}`);
+		for (const [key, value] of Object.entries(streamSpecToQuery(spec))) url.searchParams.set(key, value);
+		this.ws = new WebSocket(url.toString(), { headers: { authorization: `Bearer ${opts.sessionToken}` } });
+		this.ws.binaryType = "nodebuffer";
+		this.ready = new Promise((resolve, reject) => {
+			this.ws.once("open", () => resolve());
+			this.ws.once("error", (err) => reject(err));
+		});
+		this.ws.on("message", (data, isBinary) => {
+			if (!isBinary) return;
+			const res = decodeFsResponse(toU8(data));
+			if (!res) return;
+			const p = this.pending.get(res.reqId);
+			if (!p) return;
+			this.pending.delete(res.reqId);
+			if (res.status === "error") p.reject(new Error(res.message));
+			else p.resolve({
+				result: res.result,
+				blob: res.blob
+			});
+		});
+		const failAll = (reason) => {
+			this.closedReason = reason;
+			for (const [, p] of this.pending) p.reject(new Error(reason));
+			this.pending.clear();
+		};
+		this.ws.on("error", (err) => failAll(err.message));
+		this.ws.on("close", () => failAll(this.closedReason ?? "the sandbox filesystem connection closed"));
+	}
+	/** Open and wait for the channel to be ready to accept requests. */
+	static async connect(opts) {
+		const client = new SandboxFsClient(opts);
+		await client.ready;
+		return client;
+	}
+	request(req, blob) {
+		if (this.closedReason) return Promise.reject(new Error(this.closedReason));
+		const reqId = this.nextReqId++;
+		return new Promise((resolve, reject) => {
+			this.pending.set(reqId, {
+				resolve,
+				reject
+			});
+			try {
+				this.ws.send(encodeFsRequest(reqId, req, blob));
+			} catch (error) {
+				this.pending.delete(reqId);
+				reject(error instanceof Error ? error : new Error(String(error)));
+			}
+		});
+	}
+	async list(path) {
+		const { result } = await this.request({
+			op: "list",
+			path
+		}, null);
+		const entries = result["entries"];
+		if (!Array.isArray(entries)) return [];
+		return entries;
+	}
+	async stat(path) {
+		const { result } = await this.request({
+			op: "stat",
+			path
+		}, null);
+		return result["stat"];
+	}
+	async read(path, range) {
+		const req = range ? {
+			op: "read",
+			path,
+			offset: range.offset,
+			length: range.length
+		} : {
+			op: "read",
+			path
+		};
+		const { blob } = await this.request(req, null);
+		return blob;
+	}
+	async write(path, data) {
+		await this.request({
+			op: "write",
+			path
+		}, data);
+	}
+	async mkdir(path) {
+		await this.request({
+			op: "mkdir",
+			path
+		}, null);
+	}
+	async rename(oldPath, newPath) {
+		await this.request({
+			op: "rename",
+			oldPath,
+			newPath
+		}, null);
+	}
+	async remove(path) {
+		await this.request({
+			op: "remove",
+			path
+		}, null);
+	}
+	async exists(path) {
+		const { result } = await this.request({
+			op: "exists",
+			path
+		}, null);
+		return result["exists"] === true;
+	}
+	close() {
+		this.closedReason ??= "closed by caller";
+		this.ws.close();
+	}
+};
+
 //#endregion
 //#region src/commands/fs.ts
 /**
-* POSIX-quote one word so the remote shell treats it as a single token. Wraps
-* `shell-quote`'s `quote` (already a repo dependency, used elsewhere in the
-* CLI) rather than hand-rolling the escaping — it is the well-tested source of
-* truth for making a path/arg with spaces, quotes, `$`, `;`, globs, etc. inert
-* when interpolated into an `sh -c` line.
-*/
-function shellQuote(word) {
-	return quote([word]);
-}
-const MISSING_FILE_EXIT = 44;
-/**
-* Build the remote shell command that base64-encodes a file to stdout. Exits
-* {@link MISSING_FILE_EXIT} when the path doesn't exist, 1 when it's a
-* directory, so the caller can tell "create new" from a genuine error.
-*/
-function buildReadCommand(path) {
-	const q = shellQuote(path);
-	return `sh -c ${shellQuote(`if [ ! -e ${q} ]; then exit ${MISSING_FILE_EXIT}; fi; if [ -d ${q} ]; then echo 'path is a directory' >&2; exit 1; fi; base64 < ${q}`)}`;
-}
-/**
-* Build the remote shell command that decodes `b64` and writes it to `path`
-* atomically (temp file + `mv`) so a dropped connection can't truncate the
-* original in place. `token` is a caller-supplied unique suffix for the temp
-* file — generated in JS (not the shell's `$$`, which shell-quote would escape
-* to a literal, so every write would collide on the same temp name).
-*/
-function buildWriteCommand(path, b64, token) {
-	const tmp = `${path}.skydive-edit.${token}`;
-	return `sh -c ${shellQuote(`printf %s ${shellQuote(b64)} | base64 -d > ${shellQuote(tmp)} && mv -f ${shellQuote(tmp)} ${shellQuote(path)}`)}`;
-}
-/**
 * Resolve the editor command from an explicit override, then $VISUAL, $EDITOR,
 * then `vi`. Split so `EDITOR="code --wait"` (command + flags) is honored.
 */
@@ -2769,17 +3048,17 @@ function resolveEditor(override, env) {
 /**
 * `skydive fs edit <path>` — edit a file that lives on the agent's computer
 * (its sandbox) with your LOCAL editor. It reads the remote file down over the
-* same relay `skydive sandbox` uses, opens it in `$EDITOR`, and writes your
-* changes back when you save and close — so you edit a remote file as if it
-* were local, without opening the chat TUI.
+* multiplexed `fs` sandbox-stream channel, opens it in `$EDITOR`, and writes
+* your changes back when you save and close — so you edit a remote file as if
+* it were local, without opening the chat TUI.
 *
-* There is no server-side "file" endpoint yet: this rides entirely on the
-* existing one-shot `exec` mode of the sandbox stream. Contents move
-* base64-encoded in BOTH directions (exec has no stdin, so the write payload is
-* embedded in the command string) which keeps binary bytes, trailing newlines,
-* and CRLF intact. Access gating (EDIT on the agent + the sandbox kill switch)
-* is enforced by the relay, exactly as for `skydive sandbox`. A future PR adds
-* a first-class `fs` channel that `edit` (and `fs mount`) will ride instead.
+* It rides the first-class `fs` relay channel ({@link SandboxFsClient}): file
+* bytes move as the frame's trailing binary blob in BOTH directions, so binary
+* content, trailing newlines, and CRLF are preserved and — unlike the old
+* exec-mode path that embedded a base64 payload in the upgrade URL — a large
+* file no longer blows past the WebSocket URL / request-header length limit.
+* Access gating (EDIT on the agent + the `sandbox-fs-enabled` kill switch) is
+* enforced by the relay, exactly as for `skydive sandbox`.
 */
 const fsEditCommand = {
 	command: "edit <path>",
@@ -2798,8 +3077,8 @@ const fsEditCommand = {
 	handler: async (argv) => {
 		const session = requireSession(argv);
 		const remotePath = argv.path;
-		const { createRestClient } = await import("./rest-DADJh0bi.mjs");
-		const { resolveAgent } = await import("./print-ba_0hiV9.mjs");
+		const { createRestClient } = await import("./rest-Do3mPVpC.mjs");
+		const { resolveAgent } = await import("./print-Dc-xRapT.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken
@@ -2814,148 +3093,63 @@ const fsEditCommand = {
 			printError(error instanceof Error ? error.message : String(error));
 			process.exit(1);
 		}
-		const opts = {
-			session,
-			agentId: agent.id
-		};
-		console.error(`Reading ${remotePath} from ${agent.name}'s sandbox…`);
-		const read = await readRemote({
-			...opts,
-			path: remotePath
-		});
-		if (read.kind === "error") {
-			printError(read.message);
+		let fs;
+		try {
+			fs = await SandboxFsClient.connect({
+				appUrl: session.appUrl,
+				sessionToken: session.sessionToken,
+				agentId: agent.id
+			});
+		} catch (error) {
+			printError(`Could not open the sandbox filesystem channel: ${error instanceof Error ? error.message : String(error)}`);
 			process.exit(1);
 		}
-		const original = read.content;
-		if (read.kind === "missing") console.error(`${remotePath} does not exist yet — it will be created when you save.`);
-		const dir = await mkdtemp(join(tmpdir(), "skydive-edit-"));
-		const local = join(dir, remotePath.split("/").pop() || "file");
+		const cleanup = async (dir) => {
+			await rm(dir, {
+				recursive: true,
+				force: true
+			}).catch((error) => {
+				console.error(`Note: could not remove temp dir ${dir}: ${error instanceof Error ? error.message : String(error)}`);
+			});
+		};
+		let local = null;
+		let dir = null;
 		try {
+			console.error(`Reading ${remotePath} from ${agent.name}'s sandbox…`);
+			const isNew = !await fs.exists(remotePath);
+			const original = isNew ? Buffer.alloc(0) : Buffer.from(await fs.read(remotePath, null));
+			if (isNew) console.error(`${remotePath} does not exist yet — it will be created when you save.`);
+			dir = await mkdtemp(join(tmpdir(), "skydive-edit-"));
+			const base = remotePath.split("/").pop() || "file";
+			local = join(dir, base);
 			await writeFile(local, original);
 			if (!await openEditor(argv.editor, local)) {
 				printError("Editor exited non-zero; not saving any changes.");
+				fs.close();
+				await cleanup(dir);
 				process.exit(1);
 			}
 			const edited = await readFile(local);
 			if (edited.equals(original)) {
 				console.error("No changes — nothing written.");
+				fs.close();
+				await cleanup(dir);
 				process.exit(0);
 			}
 			console.error(`Writing changes back to ${remotePath}…`);
-			const wrote = await writeRemote({
-				...opts,
-				path: remotePath,
-				content: edited
-			});
-			if (wrote.kind === "error") {
-				printError(`${wrote.message}\nYour edited copy is kept at ${local} so you don't lose it.`);
-				process.exit(1);
-			}
+			await fs.write(remotePath, new Uint8Array(edited));
 			console.error("Saved.");
+			fs.close();
+			await cleanup(dir);
 			process.exit(0);
-		} finally {
-			await rm(dir, {
-				recursive: true,
-				force: true
-			}).catch((error) => {
-				console.error(`Note: could not remove temp dir ${dir}: ${error instanceof Error ? error.message : String(error)}`);
-			});
+		} catch (error) {
+			fs.close();
+			printError(`${error instanceof Error ? error.message : String(error)}${local ? `\nYour edited copy is kept at ${local} so you don't lose it.` : ""}`);
+			process.exit(1);
 		}
 	}
 };
 /**
-* Read a remote file as bytes. Runs `base64` on the file in the sandbox and
-* decodes the streamed stdout locally. Distinguishes "file is missing" (exit
-* code 44, so `edit` can create it) from a real read failure.
-*/
-function readRemote({ session, agentId, path }) {
-	const command = buildReadCommand(path);
-	const chunks = [];
-	const stderr = [];
-	return new Promise((resolve) => {
-		SandboxStream.open({
-			mode: "exec",
-			appUrl: session.appUrl,
-			sessionToken: session.sessionToken,
-			agentId,
-			command,
-			onEvent: (e) => {
-				switch (e.type) {
-					case "data":
-						chunks.push(Buffer.from(e.bytes));
-						break;
-					case "exit":
-						if (e.code === MISSING_FILE_EXIT) resolve({
-							kind: "missing",
-							content: Buffer.alloc(0)
-						});
-						else if (e.code === 0) resolve({
-							kind: "ok",
-							content: Buffer.from(Buffer.concat(chunks).toString("utf8").replace(/\s+/g, ""), "base64")
-						});
-						else resolve({
-							kind: "error",
-							message: stderr.join("").trim() || `Could not read the file (exit ${e.code}).`
-						});
-						break;
-					case "error":
-						stderr.push(e.message);
-						break;
-					case "close":
-						resolve({
-							kind: "error",
-							message: e.failure || "The connection to the sandbox closed before the file could be read."
-						});
-						break;
-				}
-			}
-		});
-	});
-}
-/**
-* Write bytes to a remote file. Exec has no stdin, so the base64 payload is
-* embedded in the command and decoded on the far side. Writes atomically via a
-* temp file + `mv` so a dropped connection mid-write can't leave a truncated
-* file in place of the original.
-*/
-function writeRemote({ session, agentId, path, content }) {
-	const token = randomBytes(6).toString("hex");
-	const command = buildWriteCommand(path, content.toString("base64"), token);
-	const stderr = [];
-	return new Promise((resolve) => {
-		SandboxStream.open({
-			mode: "exec",
-			appUrl: session.appUrl,
-			sessionToken: session.sessionToken,
-			agentId,
-			command,
-			onEvent: (e) => {
-				switch (e.type) {
-					case "data":
-						stderr.push(Buffer.from(e.bytes).toString("utf8"));
-						break;
-					case "exit":
-						resolve(e.code === 0 ? { kind: "ok" } : {
-							kind: "error",
-							message: stderr.join("").trim() || `Could not write the file (exit ${e.code}).`
-						});
-						break;
-					case "error":
-						stderr.push(e.message);
-						break;
-					case "close":
-						resolve({
-							kind: "error",
-							message: e.failure || "The connection to the sandbox closed before the file was written."
-						});
-						break;
-				}
-			}
-		});
-	});
-}
-/**
 * Open `file` in the caller's editor and resolve to whether it exited cleanly.
 * Precedence: explicit `--editor`, then $VISUAL, $EDITOR, then `vi`. The editor
 * inherits the real TTY so full-screen editors (vim/nano) work.
@@ -2978,7 +3172,7 @@ function openEditor(override, file) {
 *
 *   - `fs edit <path>`  edit one remote file with your local editor (shipped).
 *   - `fs mount <dir>`  mount the whole sandbox filesystem locally (coming in a
-*                       later PR, on a first-class `fs` relay channel).
+*                       later PR, on the same first-class `fs` relay channel).
 *
 * Grouping these under one command keeps the file surface discoverable and
 * leaves room to grow (`fs ls`, `fs cat`, `fs pull`) without adding more
@@ -3266,7 +3460,27 @@ function resolveSelfPath(execPath = process.execPath) {
 
 //#endregion
 //#region src/update-check/sources.ts
+/**
+* How this CLI was installed, which decides whether `skydive update` (and the
+* background update check) self-updates the binary from the release CDN or
+* hands off to the package manager.
+*
+* Two signals, runtime env first:
+*   - `SKYDIVE_CLI_INSTALL_SOURCE` env var — set by the npm launcher
+*     (src/launcher.ts) to `package-manager` before it execs the compiled
+*     binary. The binary itself is `--define`'d to `binary`, but when it was
+*     launched via the npm-installed launcher, npm owns its bytes and must not
+*     be self-mutated — so the env override wins.
+*   - The `SKYDIVE_CLI_INSTALL_SOURCE` compile-time constant — stamped
+*     `binary` into the standalone binary, undefined in the npm JS bundle.
+*
+* Any value other than exactly `binary` (including unset) means
+* package-manager, the safe default: we never self-update something we can't
+* prove is a standalone binary.
+*/
 function resolveInstallSource() {
+	const runtime = typeof process !== "undefined" ? process.env?.["SKYDIVE_CLI_INSTALL_SOURCE"] : void 0;
+	if (runtime !== void 0) return runtime === "binary" ? "binary" : "package-manager";
 	return typeof SKYDIVE_CLI_INSTALL_SOURCE === "string" && SKYDIVE_CLI_INSTALL_SOURCE === "binary" ? "binary" : "package-manager";
 }
 const NPM_REGISTRY_URL = "https://registry.npmjs.org";
@@ -3680,6 +3894,11 @@ function resolvePreference(key) {
 	}
 	return pref;
 }
+/** Human rendering of a preference value; unset string preferences (null)
+* print as empty rather than the string "null". */
+function formatValue(value) {
+	return value === null ? "" : String(value);
+}
 /** One row's worth of state for a preference, used by `list` and `get`. */
 function snapshot(pref) {
 	return {
@@ -3689,7 +3908,7 @@ function snapshot(pref) {
 		describe: pref.describe
 	};
 }
-const listCommand = {
+const listCommand$1 = {
 	command: "list",
 	aliases: ["ls"],
 	describe: "Show every editable preference, its value, and its source",
@@ -3706,7 +3925,7 @@ const listCommand = {
 			"Description"
 		], rows.map((r) => [
 			r.key,
-			String(r.value),
+			formatValue(r.value),
 			r.source,
 			r.describe
 		]));
@@ -3727,7 +3946,7 @@ const getCommand = {
 			output(argv, snapshot(pref));
 			return;
 		}
-		console.log(String(pref.read()));
+		console.log(formatValue(pref.read()));
 	}
 };
 const setCommand = {
@@ -3745,17 +3964,16 @@ const setCommand = {
 	}),
 	handler: (argv) => {
 		const pref = resolvePreference(argv.key);
-		const parsed = pref.parse(argv.value ?? "");
-		if (parsed.isErr()) {
-			printError(`${pref.key}: ${parsed.error}`);
+		const result = pref.set(argv.value ?? "");
+		if (result.isErr()) {
+			printError(`${pref.key}: ${result.error}`);
 			process.exit(1);
 		}
-		pref.write(parsed.value);
 		if (argv.json) {
 			output(argv, snapshot(pref));
 			return;
 		}
-		if (!argv.quiet) console.log(`Set ${pref.key} = ${String(parsed.value)}`);
+		if (!argv.quiet) console.log(`Set ${pref.key} = ${formatValue(pref.read())}`);
 	}
 };
 const unsetCommand = {
@@ -3775,10 +3993,13 @@ const unsetCommand = {
 			output(argv, snapshot(pref));
 			return;
 		}
-		if (!argv.quiet) console.log(`Unset ${pref.key} (now ${String(pref.read())} by default)`);
+		if (!argv.quiet) {
+			const fallback = pref.read();
+			console.log(fallback === null ? `Unset ${pref.key}` : `Unset ${pref.key} (now ${formatValue(fallback)} by default)`);
+		}
 	}
 };
-const pathCommand = {
+const pathCommand$1 = {
 	command: "path",
 	describe: "Print the on-disk config file path",
 	handler: (argv) => {
@@ -3792,14 +4013,172 @@ const pathCommand = {
 const configCommand = {
 	command: "config",
 	describe: "View and set CLI preferences (safe, hand-editable keys only)",
-	builder: (y) => y.command(listCommand).command(getCommand).command(setCommand).command(unsetCommand).command(pathCommand),
+	builder: (y) => y.command(listCommand$1).command(getCommand).command(setCommand).command(unsetCommand).command(pathCommand$1),
+	handler: (argv) => listCommand$1.handler(argv)
+};
+
+//#endregion
+//#region src/commands/logs.ts
+const ISSUE_REPOSITORY_URL = "https://github.com/Create-Inc/skydive-cli";
+function issueUrl(archivePath) {
+	const url = new URL(`${ISSUE_REPOSITORY_URL}/issues/new`);
+	url.searchParams.set("title", "CLI issue: ");
+	url.searchParams.set("body", [
+		"## What happened?",
+		"",
+		"<!-- Tell us what you were doing and what went wrong. -->",
+		"",
+		"## Diagnostics",
+		"",
+		`Please attach \`${path.basename(archivePath)}\` to this issue.`
+	].join("\n"));
+	return url.toString();
+}
+async function listLogSessions(activeSessionPath = profileDir()) {
+	const root = getAutomaticLogsDir();
+	try {
+		const entries = await fs.promises.readdir(root, { withFileTypes: true });
+		return (await Promise.all(entries.filter((entry) => entry.isDirectory() && path.join(root, entry.name) !== activeSessionPath).map(async (entry) => {
+			const sessionPath = path.join(root, entry.name);
+			return {
+				name: entry.name,
+				path: sessionPath,
+				modifiedAt: (await fs.promises.stat(sessionPath)).mtime.toISOString()
+			};
+		}))).sort((a, b) => b.name.localeCompare(a.name));
+	} catch (_error) {
+		return [];
+	}
+}
+async function resolveSession(name) {
+	const sessions = await listLogSessions();
+	const session = name ? sessions.find((candidate) => candidate.name === name) : sessions[0];
+	if (session) return session;
+	printError(name ? `Log session "${name}" was not found. Run \`skydive logs list\`.` : "No diagnostic logs found yet.");
+	process.exit(1);
+}
+async function offerIssueReport(archivePath) {
+	if (!process.stdin.isTTY || !process.stdout.isTTY) {
+		console.log(`Report an issue: ${ISSUE_REPOSITORY_URL}`);
+		return;
+	}
+	const prompt = createInterface$1({
+		input: process.stdin,
+		output: process.stdout
+	});
+	try {
+		if ((await prompt.question("Open a prefilled GitHub issue in your browser? [Y/n] ")).trim().toLowerCase() === "n") {
+			console.log(`File an issue: ${ISSUE_REPOSITORY_URL}`);
+			return;
+		}
+		await open(issueUrl(archivePath));
+		console.log(`Attach the diagnostics archive: ${archivePath}`);
+	} finally {
+		prompt.close();
+	}
+}
+async function createArchive(source, destination) {
+	await new Promise((resolve, reject) => {
+		const child = spawn("tar", [
+			"-czf",
+			destination,
+			"-C",
+			path.dirname(source),
+			path.basename(source)
+		], { stdio: [
+			"ignore",
+			"ignore",
+			"pipe"
+		] });
+		const stderr = [];
+		child.stderr.on("data", (chunk) => stderr.push(chunk));
+		child.once("error", reject);
+		child.once("close", (code) => {
+			if (code === 0) {
+				resolve();
+				return;
+			}
+			reject(new Error(Buffer.concat(stderr).toString("utf8").trim() || "Could not archive logs."));
+		});
+	});
+}
+const listCommand = {
+	command: "list",
+	aliases: ["ls"],
+	describe: "List recent diagnostic sessions",
+	handler: async (argv) => {
+		const sessions = await listLogSessions();
+		if (argv.json) {
+			output(argv, sessions);
+			return;
+		}
+		if (sessions.length === 0) {
+			console.log("No diagnostic logs found yet.");
+			return;
+		}
+		printTable(["Session", "Modified"], sessions.map((session) => [session.name, session.modifiedAt]));
+	}
+};
+const pathCommand = {
+	command: "path [session]",
+	describe: "Print a diagnostic session directory (latest by default)",
+	builder: (y) => y.positional("session", {
+		type: "string",
+		describe: "Session name from `skydive logs list`"
+	}),
+	handler: async (argv) => {
+		const session = await resolveSession(argv.session);
+		if (argv.json) {
+			output(argv, session);
+			return;
+		}
+		console.log(session.path);
+	}
+};
+const exportCommand = {
+	command: "export [session]",
+	describe: "Archive a diagnostic session for sharing (latest by default)",
+	builder: (y) => y.positional("session", {
+		type: "string",
+		describe: "Session name from `skydive logs list`"
+	}).option("output", {
+		alias: "o",
+		type: "string",
+		describe: "Archive path (defaults to the current directory)"
+	}),
+	handler: async (argv) => {
+		const session = await resolveSession(argv.session);
+		const destination = path.resolve(argv.output ?? `skydive-logs-${session.name}.tar.gz`);
+		try {
+			await createArchive(session.path, destination);
+		} catch (error) {
+			printError(error instanceof Error ? error.message : String(error));
+			process.exit(1);
+		}
+		if (argv.json) {
+			output(argv, {
+				path: destination,
+				session: session.name,
+				issueUrl: issueUrl(destination),
+				repositoryUrl: ISSUE_REPOSITORY_URL
+			});
+			return;
+		}
+		console.log(destination);
+		await offerIssueReport(destination);
+	}
+};
+const logsCommand = {
+	command: "logs",
+	describe: "Find and export recent local diagnostic logs",
+	builder: (y) => y.command(listCommand).command(pathCommand).command(exportCommand),
 	handler: (argv) => listCommand.handler(argv)
 };
 
 //#endregion
 //#region src/cli.ts
 function createCli(argv) {
-	return yargs(argv).scriptName("skydive").usage("$0 <command> [options]").parserConfiguration({ "populate--": true }).example("skydive auth login", "Store your API key").example("skydive chat", "Open the interactive chat TUI (prod)").example("skydive chat --api-url http://localhost:4500", "Chat against a local dev API").example("skydive agents list", "List your agents").example("skydive completion install", "Set up TAB completion for your shell").example("skydive keys create \"my-key\"", "Create an API key").example("skydive secrets set OPENAI_API_KEY --agent-id <id>", "Set a secret (value from stdin)").example("skydive workspace list", "List workspaces on your account").example("skydive config set updateCheck false", "Disable the daily update check").example("skydive workspace switch acme-team", "Switch the workspace all `skydive` commands act on").example("skydive portal open --agent grace", "Open the portal to this machine for an agent, headless (no TUI)").example("skydive fs edit --agent grace /tmp/notes.md", "Edit a file on the agent's computer with your local editor").option("json", {
+	return yargs(argv).scriptName("skydive").usage("$0 <command> [options]").parserConfiguration({ "populate--": true }).example("skydive auth login", "Store your API key").example("skydive chat", "Open the interactive chat TUI (prod)").example("skydive chat --api-url http://localhost:4500", "Chat against a local dev API").example("skydive agents list", "List your agents").example("skydive completion install", "Set up TAB completion for your shell").example("skydive keys create \"my-key\"", "Create an API key").example("skydive secrets set OPENAI_API_KEY --agent-id <id>", "Set a secret (value from stdin)").example("skydive workspace list", "List workspaces on your account").example("skydive config set updateCheck false", "Disable the daily update check").example("skydive logs export", "Archive the latest local diagnostics for sharing").example("skydive workspace switch acme-team", "Switch the workspace all `skydive` commands act on").example("skydive portal open --agent grace", "Open the portal to this machine for an agent, headless (no TUI)").example("skydive fs edit --agent grace /tmp/notes.md", "Edit a file on the agent's computer with your local editor").option("json", {
 		type: "boolean",
 		default: false,
 		global: true,
@@ -3813,7 +4192,7 @@ function createCli(argv) {
 		type: "string",
 		global: true,
 		describe: "Override API base URL"
-	}).command(authCommand).command(chatCommand).command(messagesCommand).command(conversationsCommand).command(agentsCommand).command(importCommand).command(keysCommand).command(secretsCommand).command(workspaceCommand).command(portalCommand).command(sandboxCommand).command(fsCommand).command(updateCommand).command(configCommand).command(completionCommand).demandCommand(1, "Specify a command. Run --help for usage.").strict().wrap(null).version(version).alias("v", "version").alias("h", "help").help().fail((msg, err) => {
+	}).command(authCommand).command(chatCommand).command(messagesCommand).command(conversationsCommand).command(agentsCommand).command(importCommand).command(keysCommand).command(secretsCommand).command(workspaceCommand).command(portalCommand).command(sandboxCommand).command(fsCommand).command(updateCommand).command(configCommand).command(logsCommand).command(completionCommand).demandCommand(1, "Specify a command. Run --help for usage.").strict().wrap(null).version(version).alias("v", "version").alias("h", "help").help().fail((msg, err) => {
 		printError(err ? err instanceof Error ? err.message : String(err) : msg ?? "Unknown error");
 		process.exit(1);
 	});
@@ -4026,7 +4405,7 @@ function setupUpdateCheck(argv) {
 
 //#endregion
 //#region src/changelog.generated.ts
-const CHANGELOG_MD = "# Changelog\n\nAll notable changes to the Skydive CLI are documented here.\n\nThe format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),\nand this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n\n## [Unreleased]\n\n### Added\n\n- `skydive fs` — a namespace for working with the files on an agent's computer (its sandbox) from your own machine. Its first subcommand, `skydive fs edit <path>`, reads a remote file down over the same relay `skydive sandbox` uses, opens it in your local editor (`$VISUAL`/`$EDITOR`, override with `--editor`, defaults to `vi`), and writes your changes back atomically when you save and close — so you can edit a remote file as if it were local without opening the chat TUI. A path that doesn't exist yet is created on save; no changes means nothing is written. Access is gated on EDIT permission for the agent, exactly like `skydive sandbox`. (A first-class `fs` relay channel and `skydive fs mount` land in follow-ups.)\n\n## [0.4.0] - 2026-08-07\n\n### Added\n\n- `skydive chat` works with API key auth: an API key alone now opens the chat TUI (and headless `chat -p`) without a browser login, using the key's pinned workspace.\n- `skydive config` command to view and set the safe, hand-editable CLI preferences (`shareMachineDefault`, `updateCheck`) without opening `config.json`. `config`/`config list` shows each key, its effective value, and whether it comes from the file or the built-in default; `config get`/`set`/`unset` read and change one key; `config path` prints the config file location. It only ever touches those preference keys, never credentials or flow-managed state.\n- Billing-blocked sends and runs now surface the server-authored recovery\n  guidance from the typed billing outcome. The chat TUI renders it as a\n  warning-toned system-notice row — live when a send is refused or a run is\n  stopped at the billing boundary, and again when reopening a conversation\n  that holds a persisted billing notice — instead of a generic error.\n  Headless `chat -p` and `messages get` print the guidance (state, recovery\n  step, and manage-billing URL) on stderr, keep any partial output already\n  streamed on stdout, and exit with code `5` (distinct from the generic `1`)\n  so scripted callers can tell a billing pause from a failure.\n- Syntax highlighting for 14 more languages in the chat transcript and file/review panes (python, bash, go, rust, c, cpp, java, ruby, css, html, json, yaml, and more) — previously only JavaScript/TypeScript rendered colored.\n\n### Changed\n\n- `skydive agent list` lists the full agent roster by default instead of a truncated page.\n\n### Fixed\n\n- Long multi-line bash tool-call commands (e.g. heredocs) are clamped with a `+N more · click to expand` tail instead of dumping their whole body into the scrollback.\n- Tool error output is clipped the same way as ok output, so a failing command no longer floods the transcript.\n- The TUI toast overlay has an opaque background instead of letting the transcript bleed through.\n\n## [0.3.0] - 2026-08-04\n\n### Added\n\n**Chat TUI**\n\n- `/fork` slash command to fork a conversation at any point and continue in a new thread.\n- `/conversation` switches threads from inside a live session.\n- `/compact` triggers manual conversation compaction.\n- `/portal` and `/copy` slash commands.\n- Archive the current conversation from the chat TUI.\n- `--new` flag on `skydive chat` to start a fresh conversation.\n- Debounced server-side conversation search in the picker, with title matches ranked first.\n- File review pane orientation toggle, and review comments in the file pane.\n- Pinned plan card controls and a jump-to-latest hint.\n- Terminal title (OSC) follows the live conversation title on every screen; inside cmux the workspace is renamed too, and linked PRs are pushed to the cmux sidebar.\n- Every participating agent shows in the conversation list; connect cards each have their own identity, and ctrl+r asks which connect card to act on.\n- Colored Skydive splash art in `skydive --help` and the TUI pickers.\n- New-agent name prefilled from the server's suggestion.\n\n**CLI & platform**\n\n- `skydive update` self-updater, with an update notice when a new version is available.\n- Shell completions for bash, zsh, and fish via `completion install`.\n- Portal daemon: one connection per host with per-conversation working directories.\n- Agent-led coding-agent import (`skydive import`).\n- Per-workspace scoping on the REST client, and cross-org `--agent <uuid>` auto-switches workspace.\n- `skydive-beta` wrapper for the canary channel.\n\n### Fixed\n\n- `skydive update` no longer claims an update is available on every npm install.\n- Chat memory is bounded (payload clamps + windowed rows) with a memory watchdog and OOM diagnostic report; transcript rows are memoized so streaming stops re-rendering the whole chat.\n- Chat-send failures map to real error messages.\n- Notification and sidebar previews use the last text block of the reply and strip inline markdown.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n- Sending to non-web channel conversations is blocked in the TUI.\n- GitHub bot connect opens on the web front door, not api.skydive.com.\n- TUI activity counter times from the run, not the screen.\n\n## [0.2.0] - 2026-07-29\n\n### Added\n\n**Sandbox & machine access**\n\n- Standalone `skydive sandbox` command for direct access to an agent's sandbox.\n- `/sandbox` in the chat TUI — live PTY session and one-shot command execution.\n- Headless machine sharing via `skydive portal`, with self-registering portal grants.\n- `shareMachineDefault` config key for always-on portal sharing.\n\n**Chat TUI**\n\n- File pane (`ctrl+g`) with Changes and Files tabs: a shared file tree plus source viewer and a workspace browser, mouse-resizable and responsive to terminal size.\n- Agent todo list rendered in the chat TUI, above the composer, mirroring the web chat's todo card.\n- Fuzzy finder in the conversation and agent pickers.\n- Slash-command autocomplete menu.\n- Paste or drag-and-drop any file into the composer; paste clipboard images with Cmd+V.\n- Run local shell commands with `!` in the composer.\n- Conversation recaps, streamed live title updates, and per-agent attribution on assistant turns.\n- Working timer rolls up into minutes and hours.\n- Conversation picker paginates past 50 conversations and shows only your own conversations.\n- Esc leaves a live run; typing `exit` quits the chat.\n- Cursor Dark theme.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n\n**Headless & scripting**\n\n- Resume a conversation by id.\n- `conversations list` and `conversations show` for transcript reads.\n- `messages get`, with run recovery keyed on message id.\n- Connect cards surface in headless `-p` mode so a driving agent never gets stuck.\n\n**Authentication**\n\n- `skydive auth login` via the browser now auto-mints an API key, so one login yields both a chat session and a usable management credential. Management commands announce the key's pinned workspace when it drives them, so a workspace mismatch is visible at use time.\n- Workspace picker on the device authorization page.\n- Account and workspace identity shown in `auth status`.\n\n**Platform**\n\n- Standalone binary builds compiling the CLI into a per-target executable.\n- Interactive workspace switcher; management commands follow the active workspace.\n- Terminal host integrations and agent notifications.\n\n### Fixed\n\n- Transcript errors collapse to one line, click to expand (REST and portal errors keep their full body).\n- Dragged/pasted image file paths attach the file instead of inserting path text, including macOS paths with literal parentheses.\n- Bare URLs in chat markdown are hyperlinked so they survive text wrap.\n- Composer draft is preserved across TUI overlays.\n- Relative connect links resolve before opening the browser.\n- Numbered markdown headings render colored in the TUI.\n- Chat transcript pages by 75% of a screen; picker rows stay on one line.\n- Run starts push to the TUI over the conversation stream.\n- Security: remediated high-severity dependency findings and cleared tar/shell-quote CVEs.\n\n## [0.1.0] - 2026-07-21\n\nInitial public release: `skydive chat` TUI, agent and conversation management,\ndevice authorization, and headless `-p` mode.\n";
+const CHANGELOG_MD = "# Changelog\n\nAll notable changes to the Skydive CLI are documented here.\n\nThe format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),\nand this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\n\n## [Unreleased]\n\n### Changed\n\n- `npm i -g skydive-cli` (and yarn/pnpm/bun) now installs a tiny launcher plus one prebuilt, os/cpu-matched binary that carries its own runtime — so on the common platforms `skydive chat` and `skydive import` start instantly and **do not download a Bun runtime on first use**. On any platform without a prebuilt binary (or if the optional dependency is skipped), the CLI automatically falls back to the existing behavior: it runs under your Node and provisions Bun on first `chat`, exactly as before. Nothing about the commands, flags, config, or `SKYDIVE_*` environment variables changes, and `skydive update` still upgrades npm installs via your package manager and standalone-binary installs in place.\n\n### Added\n\n- `platform ask` forms now render in the chat TUI. The card lists each question with lettered options (A/B/C/D plus Other); `ctrl+r` opens a full overlay picker (one question at a time, arrows + enter, Other as a typed row — the Claude Code interaction). The answer sends as a normal message. Headless `chat -p` prints the question as an `[action needed]` block instead of dropping it.\n- Every API request now reports this install's version (`x-skydive-cli-version`) so the server can refuse features the installed CLI cannot render — `platform ask` needs the #21411 canary (`0.5.0-beta.43` or newer), not 0.4.0 and not earlier 0.5.0 betas.\n- `/search` (alias `/find`) in the chat TUI — opens the conversation picker with its search field focused, so \"find a conversation\" has a discoverable command instead of being a feature you had to know the bare picker already had. Pass a query inline (`/search billing deep dive`) and the picker opens already narrowed to the matches; bare `/search` opens it ready for you to type. The search runs server-side across conversation titles, message bodies, and participant names, the same search the picker exposes.\n- First run in a workspace with no agents now sets you up automatically: instead of dropping you on an empty agent picker, `skydive` creates your first agent for you (with a suggested name and avatar, mirroring the web onboarding flow) and then offers to have it learn how you already work — reading the other coding agents set up on your machine (Claude Code, Cursor, Codex, and more), the same import that `skydive import` runs, with a plan shown first and credentials never copied. Decline and you go straight into the new agent's chat. You can replay this flow anytime with `skydive --onboarding` (or `SKYDIVE_FORCE_ONBOARDING=1`), even in a workspace that already has agents.\n- `/computer` in the chat TUI — a snapshot of the agent's sandbox drawn as colored bar graphs: CPU, memory, and disk usage. Bars turn amber past 75%% and red past 90%% so a glance tells you whether the box is under pressure. The numbers come from the Skydive API (the same live resource sample the web computer view reads), not by connecting to the sandbox — so the card shows instantly, never waking or hanging on a box that isn't running: when the agent has no live sandbox it simply reads \"no sandbox running\". The card keeps itself current quietly (a slow background refresh, no flicker or \"updating\" chrome); only the most recent card refreshes, and it silently stops while you're scrolled up (no wasted polls on a card you're not looking at) and resumes at the bottom.\n- `/computer restart` in the chat TUI — reboot the agent's sandbox from chat. It asks a `y`/`n` confirm first (the restart stops whatever run is going and brings up a fresh box), then enqueues the same restart the web \"Restart\" control does. Available to anyone with edit access to the agent; view-only members are told they can't.\n- `skydive fs` — a namespace for working with the files on an agent's computer (its sandbox) from your own machine. Its first subcommand, `skydive fs edit <path>`, reads a remote file down over the same relay `skydive sandbox` uses, opens it in your local editor (`$VISUAL`/`$EDITOR`, override with `--editor`, defaults to `vi`), and writes your changes back atomically when you save and close — so you can edit a remote file as if it were local without opening the chat TUI. A path that doesn't exist yet is created on save; no changes means nothing is written. Access is gated on EDIT permission for the agent, exactly like `skydive sandbox`. (A first-class `fs` relay channel and `skydive fs mount` land in follow-ups.)\n\n## [0.4.0] - 2026-08-07\n\n### Added\n\n- `skydive chat` works with API key auth: an API key alone now opens the chat TUI (and headless `chat -p`) without a browser login, using the key's pinned workspace.\n- `skydive config` command to view and set the safe, hand-editable CLI preferences (`shareMachineDefault`, `updateCheck`) without opening `config.json`. `config`/`config list` shows each key, its effective value, and whether it comes from the file or the built-in default; `config get`/`set`/`unset` read and change one key; `config path` prints the config file location. It only ever touches those preference keys, never credentials or flow-managed state.\n- Billing-blocked sends and runs now surface the server-authored recovery\n  guidance from the typed billing outcome. The chat TUI renders it as a\n  warning-toned system-notice row — live when a send is refused or a run is\n  stopped at the billing boundary, and again when reopening a conversation\n  that holds a persisted billing notice — instead of a generic error.\n  Headless `chat -p` and `messages get` print the guidance (state, recovery\n  step, and manage-billing URL) on stderr, keep any partial output already\n  streamed on stdout, and exit with code `5` (distinct from the generic `1`)\n  so scripted callers can tell a billing pause from a failure.\n- Syntax highlighting for 14 more languages in the chat transcript and file/review panes (python, bash, go, rust, c, cpp, java, ruby, css, html, json, yaml, and more) — previously only JavaScript/TypeScript rendered colored.\n\n### Changed\n\n- `skydive agent list` lists the full agent roster by default instead of a truncated page.\n\n### Fixed\n\n- Long multi-line bash tool-call commands (e.g. heredocs) are clamped with a `+N more · click to expand` tail instead of dumping their whole body into the scrollback.\n- Tool error output is clipped the same way as ok output, so a failing command no longer floods the transcript.\n- The TUI toast overlay has an opaque background instead of letting the transcript bleed through.\n\n## [0.3.0] - 2026-08-04\n\n### Added\n\n**Chat TUI**\n\n- `/fork` slash command to fork a conversation at any point and continue in a new thread.\n- `/conversation` switches threads from inside a live session.\n- `/compact` triggers manual conversation compaction.\n- `/portal` and `/copy` slash commands.\n- Archive the current conversation from the chat TUI.\n- `--new` flag on `skydive chat` to start a fresh conversation.\n- Debounced server-side conversation search in the picker, with title matches ranked first.\n- File review pane orientation toggle, and review comments in the file pane.\n- Pinned plan card controls and a jump-to-latest hint.\n- Terminal title (OSC) follows the live conversation title on every screen; inside cmux the workspace is renamed too, and linked PRs are pushed to the cmux sidebar.\n- Every participating agent shows in the conversation list; connect cards each have their own identity, and ctrl+r asks which connect card to act on.\n- Colored Skydive splash art in `skydive --help` and the TUI pickers.\n- New-agent name prefilled from the server's suggestion.\n\n**CLI & platform**\n\n- `skydive update` self-updater, with an update notice when a new version is available.\n- Shell completions for bash, zsh, and fish via `completion install`.\n- Portal daemon: one connection per host with per-conversation working directories.\n- Agent-led coding-agent import (`skydive import`).\n- Per-workspace scoping on the REST client, and cross-org `--agent <uuid>` auto-switches workspace.\n- `skydive-beta` wrapper for the canary channel.\n\n### Fixed\n\n- `skydive update` no longer claims an update is available on every npm install.\n- Chat memory is bounded (payload clamps + windowed rows) with a memory watchdog and OOM diagnostic report; transcript rows are memoized so streaming stops re-rendering the whole chat.\n- Chat-send failures map to real error messages.\n- Notification and sidebar previews use the last text block of the reply and strip inline markdown.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n- Sending to non-web channel conversations is blocked in the TUI.\n- GitHub bot connect opens on the web front door, not api.skydive.com.\n- TUI activity counter times from the run, not the screen.\n\n## [0.2.0] - 2026-07-29\n\n### Added\n\n**Sandbox & machine access**\n\n- Standalone `skydive sandbox` command for direct access to an agent's sandbox.\n- `/sandbox` in the chat TUI — live PTY session and one-shot command execution.\n- Headless machine sharing via `skydive portal`, with self-registering portal grants.\n- `shareMachineDefault` config key for always-on portal sharing.\n\n**Chat TUI**\n\n- File pane (`ctrl+g`) with Changes and Files tabs: a shared file tree plus source viewer and a workspace browser, mouse-resizable and responsive to terminal size.\n- Agent todo list rendered in the chat TUI, above the composer, mirroring the web chat's todo card.\n- Fuzzy finder in the conversation and agent pickers.\n- Slash-command autocomplete menu.\n- Paste or drag-and-drop any file into the composer; paste clipboard images with Cmd+V.\n- Run local shell commands with `!` in the composer.\n- Conversation recaps, streamed live title updates, and per-agent attribution on assistant turns.\n- Working timer rolls up into minutes and hours.\n- Conversation picker paginates past 50 conversations and shows only your own conversations.\n- Esc leaves a live run; typing `exit` quits the chat.\n- Cursor Dark theme.\n- Picker rows no longer overlap when a conversation title contains a newline, tab, or control character.\n\n**Headless & scripting**\n\n- Resume a conversation by id.\n- `conversations list` and `conversations show` for transcript reads.\n- `messages get`, with run recovery keyed on message id.\n- Connect cards surface in headless `-p` mode so a driving agent never gets stuck.\n\n**Authentication**\n\n- `skydive auth login` via the browser now auto-mints an API key, so one login yields both a chat session and a usable management credential. Management commands announce the key's pinned workspace when it drives them, so a workspace mismatch is visible at use time.\n- Workspace picker on the device authorization page.\n- Account and workspace identity shown in `auth status`.\n\n**Platform**\n\n- Standalone binary builds compiling the CLI into a per-target executable.\n- Interactive workspace switcher; management commands follow the active workspace.\n- Terminal host integrations and agent notifications.\n\n### Fixed\n\n- Transcript errors collapse to one line, click to expand (REST and portal errors keep their full body).\n- Dragged/pasted image file paths attach the file instead of inserting path text, including macOS paths with literal parentheses.\n- Bare URLs in chat markdown are hyperlinked so they survive text wrap.\n- Composer draft is preserved across TUI overlays.\n- Relative connect links resolve before opening the browser.\n- Numbered markdown headings render colored in the TUI.\n- Chat transcript pages by 75% of a screen; picker rows stay on one line.\n- Run starts push to the TUI over the conversation stream.\n- Security: remediated high-severity dependency findings and cleared tar/shell-quote CVEs.\n\n## [0.1.0] - 2026-07-21\n\nInitial public release: `skydive chat` TUI, agent and conversation management,\ndevice authorization, and headless `-p` mode.\n";
 
 //#endregion
 //#region src/whats-new.ts
@@ -4169,7 +4548,7 @@ if (process.argv.includes(UPDATE_WORKER_FLAG)) {
 	process.exit(0);
 }
 if (process.argv.includes(PORTAL_DAEMON_FLAG)) {
-	const { runPortalDaemon } = await import("./daemon-CBvFKDpy.mjs");
+	const { runPortalDaemon } = await import("./daemon-mLypjXdu.mjs");
 	runPortalDaemon(process.argv);
 } else runCli();
 function runCli() {