skydive-cli 0.5.0-beta.41 → 0.5.0-beta.46

package/dist/js/{daemon-D8WoX21I.mjs → daemon-MZN78SYL.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { n as isRecord, t as PortalClient } from "./client-DMYwKALl.mjs";
+import { n as isRecord, t as PortalClient } from "./client-C2lPer4b.mjs";
 import { t as defaultTlsCertSource } from "./tls-cert-CV-pwxVN.mjs";
 import os from "node:os";
 import path from "node:path";
@@ -21,7 +21,7 @@ import { access, appendFile, mkdir, readFile, unlink, writeFile } from "node:fs/
 * the commit time of the built tree is one monotonic clock they share.
 */
 function portalDaemonBuild() {
-	return "1786915412";
+	return "1787048488";
 }
 /**
 * Whether a client carrying `mine` should replace a running daemon carrying
@@ -220,6 +220,20 @@ const clientStatusSchema = z.object({ t: z.literal("status") });
 * exits — cutting live exec/tunnel connections, not just refusing new ones.
 */
 const clientShutdownSchema = z.object({ t: z.literal("shutdown") });
+/**
+* `shutdown_handoff` — a newer daemon taking over (self-update / newest-build-
+* wins) asks the incumbent to step down WITHOUT dropping the portal connection
+* first. The incumbent frees the control socket and disconnects attached CLIs
+* (they reconnect to the new daemon in ~500ms, unchanged), but KEEPS its
+* outbound portal WebSocket — and thus its presence claim — alive until the
+* new daemon has dialled out and claimed the machine's presence slot, at which
+* point the server supersedes the incumbent's socket and it exits. This is a
+* make-before-break handoff: the presence key is owned by one daemon or the
+* other for the entire takeover, so `exec`/`file write` never sees a
+* `registered but not connected` gap mid-upgrade. A bounded fallback timeout
+* ensures the incumbent still exits if the successor never comes up.
+*/
+const clientShutdownHandoffSchema = z.object({ t: z.literal("shutdown_handoff") });
 const clientMessageSchema = z.discriminatedUnion("t", [
 	clientHelloSchema,
 	clientBindSchema,
@@ -230,7 +244,8 @@ const clientMessageSchema = z.discriminatedUnion("t", [
 	clientDeclineSchema,
 	clientByeSchema,
 	clientStatusSchema,
-	clientShutdownSchema
+	clientShutdownSchema,
+	clientShutdownHandoffSchema
 ]);
 /**
 * `state` — the shared portal status, pushed to every attached client so each
@@ -357,6 +372,14 @@ function parseDaemonMessage(line) {
 */
 /** Grace period after the last client detaches before the daemon exits. */
 const IDLE_SHUTDOWN_MS = 3e4;
+/**
+* Upper bound an incumbent daemon waits, during a graceful handoff, for the
+* successor to dial out and claim presence before giving up and releasing the
+* slot itself. Comfortably above a normal successor boot + WS dial (a few
+* hundred ms to a couple of seconds), and short enough that a failed successor
+* doesn't strand the machine as reachable-but-dead for long.
+*/
+const HANDOFF_MAX_WAIT_MS = 1e4;
 var PortalDaemon = class {
 	appUrl;
 	paths;
@@ -369,6 +392,7 @@ var PortalDaemon = class {
 	persistedMachineName = null;
 	fallbackCwd;
 	idleTimer = null;
+	handingOff = false;
 	sessionToken = null;
 	deviceToken = null;
 	constructor(appUrl) {
@@ -478,6 +502,9 @@ var PortalDaemon = class {
 			case "shutdown":
 				this.forceShutdown();
 				return;
+			case "shutdown_handoff":
+				this.gracefulHandoffShutdown();
+				return;
 			default: return msg;
 		}
 	}
@@ -615,6 +642,37 @@ var PortalDaemon = class {
 		this.server?.close();
 		process.exit(0);
 	}
+	/**
+	* Graceful takeover step-down (a newer daemon is replacing us). Unlike
+	* `forceShutdown`, this does NOT drop the portal connection up front: doing so
+	* would let this machine's presence key expire (10s TTL) before the successor
+	* dials out and re-claims it, which is the `registered but not connected` gap
+	* that made `exec`/`file write` fail mid-self-update.
+	*
+	* Order matters. We free the control socket and disconnect attached CLIs
+	* first, because the successor cannot bind the singleton socket (and thus
+	* cannot start its own portal client) until we release it. But we KEEP our
+	* outbound portal WebSocket — and its presence claim — alive across that
+	* window. When the successor connects and `claim()`s the slot, the server
+	* supersedes us and closes our socket; `beginHandoff` resolves on that close
+	* and we exit. A bounded fallback inside `beginHandoff` still exits us if the
+	* successor never comes up, so we never hold a dead slot forever.
+	*/
+	async gracefulHandoffShutdown() {
+		if (this.handingOff) return;
+		this.handingOff = true;
+		for (const conn of this.conns) try {
+			conn.socket.destroy();
+		} catch (_error) {}
+		this.conns.clear();
+		this.server?.close();
+		this.server = null;
+		if (this.client) {
+			await this.client.beginHandoff(HANDOFF_MAX_WAIT_MS);
+			this.client.dispose();
+		}
+		process.exit(0);
+	}
 	async loadState() {
 		try {
 			const raw = await readFile(this.paths.statePath, "utf8");
@@ -663,7 +721,7 @@ async function ensureDaemonRunning(appUrl) {
 	if (await isDaemonListening(socketPath)) {
 		const status = await queryDaemonStatus(appUrl);
 		if (!status || !isNewerBuild(portalDaemonBuild(), status.build)) return;
-		if (await stopDaemon(appUrl) === "failed") return;
+		if (await stopDaemonForHandoff(appUrl) === "failed") return;
 	}
 	const entry = process.argv[1];
 	const args = entry ? [
@@ -758,6 +816,37 @@ async function queryDaemonStatus(appUrl) {
 	});
 }
 /**
+* Ask a running incumbent daemon to step down for a make-before-break handoff
+* (see the daemon's `gracefulHandoffShutdown`). Sends `shutdown_handoff` and
+* waits for the incumbent to release the CONTROL SOCKET — at which point the
+* successor can bind it and start its own portal client. Crucially, the
+* incumbent keeps its portal connection (and presence) alive past this point,
+* so the successor's subsequent `claim()` supersedes it with no presence gap.
+*
+* Returns `stopped` once the socket is free, `failed` if it never freed (the
+* caller should then leave the incumbent alone rather than fight it — same
+* fallback semantics as `stopDaemon`), or `not-running` if nothing was there.
+* Unlike `stopDaemon` this never SIGKILLs: the incumbent is intentionally still
+* alive (holding presence) after it frees the socket, so killing it by pid is
+* exactly the gap this path exists to avoid.
+*/
+async function stopDaemonForHandoff(appUrl) {
+	const { socketPath } = daemonPaths(appUrl);
+	if (!await isDaemonListening(socketPath)) return "not-running";
+	const sock = await connectControl(socketPath);
+	if (!sock) return "failed";
+	sock.write(encodeLine({ t: "shutdown_handoff" }));
+	for (let i = 0; i < 50; i += 1) {
+		await sleep(100);
+		if (!await isDaemonListening(socketPath)) {
+			sock.destroy();
+			return "stopped";
+		}
+	}
+	sock.destroy();
+	return "failed";
+}
+/**
 * Hard-stop a running daemon. Preferred path: send `shutdown` over the control
 * socket so it drains clients and exits cleanly. If the socket is unresponsive
 * (a wedged daemon), fall back to SIGTERM then SIGKILL by the pid the status
@@ -809,4 +898,4 @@ function sleep(ms) {
 }
 
 //#endregion
-export { runPortalDaemon as a, LOCAL_PROTOCOL_VERSION as c, encodeLine as d, makeLineParser as f, queryDaemonStatus as i, PORTAL_DAEMON_FLAG as l, ensureDaemonRunning as n, startPortalDaemon as o, parseDaemonMessage as p, isDaemonListening as r, stopDaemon as s, PortalDaemon as t, daemonPaths as u };
+export { runPortalDaemon as a, stopDaemonForHandoff as c, daemonPaths as d, encodeLine as f, queryDaemonStatus as i, LOCAL_PROTOCOL_VERSION as l, parseDaemonMessage as m, ensureDaemonRunning as n, startPortalDaemon as o, makeLineParser as p, isDaemonListening as r, stopDaemon as s, PortalDaemon as t, PORTAL_DAEMON_FLAG as u };

package/dist/js/daemon-S0p-4FGa.mjs

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import "./client-C2lPer4b.mjs";
+import { a as runPortalDaemon, c as stopDaemonForHandoff, i as queryDaemonStatus, n as ensureDaemonRunning, o as startPortalDaemon, r as isDaemonListening, s as stopDaemon, t as PortalDaemon } from "./daemon-MZN78SYL.mjs";
+import "./tls-cert-CV-pwxVN.mjs";
+import "./api-TwLD7ibI.mjs";
+
+export { runPortalDaemon };

package/dist/js/daemon-client-DMx26-Rz.mjs

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import "./client-C2lPer4b.mjs";
+import "./daemon-MZN78SYL.mjs";
+import "./tls-cert-CV-pwxVN.mjs";
+import "./api-TwLD7ibI.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-qNlw9inL.mjs";
+
+export { PortalDaemonClient };

package/dist/js/{daemon-client-Bp5DMeIi.mjs → daemon-client-qNlw9inL.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { c as LOCAL_PROTOCOL_VERSION, d as encodeLine, f as makeLineParser, n as ensureDaemonRunning, p as parseDaemonMessage, u as daemonPaths } from "./daemon-D8WoX21I.mjs";
+import { d as daemonPaths, f as encodeLine, l as LOCAL_PROTOCOL_VERSION, m as parseDaemonMessage, n as ensureDaemonRunning, p as makeLineParser } from "./daemon-MZN78SYL.mjs";
 import { randomUUID } from "node:crypto";
 import { connect } from "node:net";
 

package/dist/js/{forward-zwB55Bls.mjs → forward-Ct8Vd2WW.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { r as warnOnRebindProtection } from "./tls-cert-CV-pwxVN.mjs";
-import { l as startTlsForward, t as fetchForwardTarget } from "./api-DQCaztBg.mjs";
+import { l as startTlsForward, t as fetchForwardTarget } from "./api-TwLD7ibI.mjs";
 import net from "node:net";
 import { WebSocket, createWebSocketStream } from "ws";
 

package/dist/js/{install-BkMcGVYS.mjs → install-DNJ6k578.mjs}

@@ -1,16 +1,12 @@
 #!/usr/bin/env node
-import { C as getConfigPath } from "./print-CwbdwCeQ.mjs";
+import { s as version$1 } from "./rest-BtHVI0y6.mjs";
+import { w as getConfigPath } from "./print-Bg8rzq9t.mjs";
 import os from "node:os";
 import path from "node:path";
 import { err, ok } from "neverthrow";
 import { z } from "zod";
 import fs from "node:fs";
 
-//#region package.json
-var name = "skydive-cli";
-var version$1 = "0.5.0-beta.41";
-
-//#endregion
 //#region src/auth/organization.ts
 const workspaceSchema = z.object({
 	id: z.string(),
@@ -1582,4 +1578,4 @@ function printFatalNotice(file, memory) {
 }
 
 //#endregion
-export { installAgentAlias as A, resolveWorkspaceId as B, themeVersion as C, machineOsFromPlatform as D, buildImportSeedPrompt as E, detectShell as F, name as H, ensureActiveOrganization as I, getActiveWorkspaceId as L, takenAliasNames as M, SUPPORTED_SHELLS as N, aliasActivationHint as O, defaultInstallEnv as P, getSessionIdentity as R, themeModeFromColorFgBg as S, themesForMode as T, version$1 as U, setActiveWorkspace as V, monoTheme as _, WORDMARK as a, themeForMode as b, getAutomaticLogsDir as c, profilingEnabled as d, record as f, findTheme as g, applyTheme as h, MARK_CELLS as i, slugifyAliasName as j, dedupeAliasName as k, maybeStartProfiling as l, DEFAULT_THEME_ID as m, buildCrashReport as n, brandHelpArt as o, writeArtifact as p, writeCrashReport as r, splashFitsWidth as s, installCrashHandler as t, profileDir as u, noColorRequested as v, themes as w, themeMode as x, theme as y, listWorkspaces as z };
+export { installAgentAlias as A, resolveWorkspaceId as B, themeVersion as C, machineOsFromPlatform as D, buildImportSeedPrompt as E, detectShell as F, ensureActiveOrganization as I, getActiveWorkspaceId as L, takenAliasNames as M, SUPPORTED_SHELLS as N, aliasActivationHint as O, defaultInstallEnv as P, getSessionIdentity as R, themeModeFromColorFgBg as S, themesForMode as T, setActiveWorkspace as V, monoTheme as _, WORDMARK as a, themeForMode as b, getAutomaticLogsDir as c, profilingEnabled as d, record as f, findTheme as g, applyTheme as h, MARK_CELLS as i, slugifyAliasName as j, dedupeAliasName as k, maybeStartProfiling as l, DEFAULT_THEME_ID as m, buildCrashReport as n, brandHelpArt as o, writeArtifact as p, writeCrashReport as r, splashFitsWidth as s, installCrashHandler as t, profileDir as u, noColorRequested as v, themes as w, themeMode as x, theme as y, listWorkspaces as z };

package/dist/js/{print-BAmEefvX.mjs → print-BAdeImNJ.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-CwbdwCeQ.mjs";
-import "./rest-Bbe-RhMy.mjs";
+import "./rest-BtHVI0y6.mjs";
+import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-Bg8rzq9t.mjs";
 import "./billing-blocked-D3l5kJlX.mjs";
 
 export { messageGet, readStdin, resolveAgent, runPrint };

package/dist/js/{print-CwbdwCeQ.mjs → print-Bg8rzq9t.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as HttpError } from "./http-error-UHH3mVBF.mjs";
-import { a as isRecord, i as errorMessage, r as sendErrorMessage, t as createRestClient } from "./rest-Bbe-RhMy.mjs";
+import { a as isRecord, i as errorMessage, r as sendErrorMessage, t as createRestClient } from "./rest-BtHVI0y6.mjs";
+import { t as HttpError } from "./http-error-BF2NZZE3.mjs";
 import { i as billingBlockedOutcomeFromSendResponse, n as BillingBlockedError } from "./billing-blocked-D3l5kJlX.mjs";
 import path from "node:path";
 import Conf from "conf";
@@ -440,7 +440,8 @@ function parseDesktopHandoffCard(rootEl) {
 		},
 		state: {},
 		computeRequestId: null,
-		settled: null
+		settled: null,
+		questions: []
 	};
 }
 /**
@@ -478,7 +479,70 @@ function parseComputeRequestCard(rootEl) {
 		},
 		state: {},
 		computeRequestId: requestId,
-		settled
+		settled,
+		questions: []
+	};
+}
+function readQuestionOptions(raw) {
+	if (!Array.isArray(raw)) return [];
+	return raw.flatMap((o) => {
+		if (!isRecord(o)) return [];
+		const label = optionalString(o.label);
+		if (!label) return [];
+		return [{ label }];
+	});
+}
+function readQuestionEntries(raw) {
+	if (!Array.isArray(raw)) return [];
+	return raw.flatMap((q) => {
+		if (!isRecord(q)) return [];
+		const question = optionalString(q.question);
+		if (!question) return [];
+		const options = readQuestionOptions(q.options);
+		if (options.length < 2) return [];
+		return [{
+			question,
+			options,
+			multiSelect: Boolean(q.multiSelect)
+		}];
+	});
+}
+/**
+* The `platform ask` form. The web renders it as an interactive picker; here
+* it maps onto an answer_question button so ctrl+r (and letter shortcuts)
+* open an in-TUI picker. The composed answer is sent as a normal user
+* message — same non-blocking model as the web card. Without this the spec
+* is not a Card, parses to null, and the question is silently dropped.
+*/
+/** Compose the user-message body the web card also sends. */
+function composeQuestionAnswer(questions, answers) {
+	if (questions.length === 1) return (answers[0] ?? []).join(", ");
+	return questions.map((q, i) => `${q.question} → ${(answers[i] ?? []).join(", ")}`).join("\n");
+}
+function parseQuestionCard(rootEl) {
+	const props = isRecord(rootEl.props) ? rootEl.props : {};
+	const cardId = optionalString(props.cardId);
+	if (!cardId) return null;
+	const questions = readQuestionEntries(props.questions);
+	if (questions.length === 0) return null;
+	const settled = (props.status === "answered" ? "answered" : "pending") === "answered" ? optionalString(props.answerSummary) ?? "answered" : null;
+	const only = questions.length === 1 ? questions[0] : void 0;
+	return {
+		title: only ? only.question : "Questions",
+		subtitle: null,
+		description: null,
+		fields: [],
+		button: settled ? null : {
+			label: "Answer",
+			action: {
+				kind: "answer_question",
+				cardId
+			}
+		},
+		state: {},
+		computeRequestId: null,
+		settled,
+		questions
 	};
 }
 function parseConnectCard(spec) {
@@ -489,6 +553,7 @@ function parseConnectCard(spec) {
 	if (!isRecord(rootEl)) return null;
 	if (rootEl.type === "DesktopHandoffCard") return parseDesktopHandoffCard(rootEl);
 	if (rootEl.type === "ComputeRequestCard") return parseComputeRequestCard(rootEl);
+	if (rootEl.type === "QuestionCard") return parseQuestionCard(rootEl);
 	if (rootEl.type !== "Card") return null;
 	const rootProps = isRecord(rootEl.props) ? rootEl.props : {};
 	const title = optionalString(rootProps.title);
@@ -529,7 +594,8 @@ function parseConnectCard(spec) {
 		} : null,
 		state: isRecord(spec.state) ? spec.state : {},
 		computeRequestId: null,
-		settled: null
+		settled: null,
+		questions: []
 	};
 }
 
@@ -677,6 +743,13 @@ function summarizeConnectCard(card, appUrl) {
 				requestId: act.requestId
 			}
 		};
+		case "answer_question": return {
+			...base,
+			action: {
+				kind: "answer_question",
+				questions: card.questions.map((q) => q.question)
+			}
+		};
 		default: return {
 			...base,
 			action: { kind: "unsupported" }
@@ -717,6 +790,9 @@ function formatConnectCard(card) {
 		case "decide_compute":
 			lines.push("Approve or deny this compute increase in the interactive TUI or web app.");
 			break;
+		case "answer_question":
+			lines.push(`Answer in the interactive TUI or web app: ${card.action.questions.join("; ")}`);
+			break;
 		case "unsupported":
 			lines.push("Open this conversation in the web app to continue.");
 			break;
@@ -936,4 +1012,4 @@ async function readStdin() {
 }
 
 //#endregion
-export { getShareMachineDefault as A, resolveWebUrl as B, getConfigPath as C, getPromptHistoryPath as D, getPreference as E, resolveAppUrl as F, saveSession as H, resolveChatAuth as I, resolveConfig as L, getStoredApiKeyWorkspaceName as M, getUpdateCheckDisabled as N, getReviewStateDir as O, recordDefaultAgent as P, resolveManagementAuth as R, deleteConfig as S, getLastSeenVersion as T, saveTheme as U, saveConfig as V, setLastSeenVersion as W, API_KEY_FAMILY_PREFIX as _, runPrint as a, DEFAULT_APP_URL as b, cardActionErrorMessage as c, reconcileMaskedInput as d, resolveConnectUrl as f, API_KEYS_URL as g, specKeyFor as h, resolveAgent as i, getStoredApiKeyId as j, getSavedTheme as k, parseExternalOauthConnectParams as l, parseConnectCard as m, messageGet as n, toPrintError as o, computeSettledLabel as p, readStdin as r, MASK_CHAR as s, collectRunText as t, parseOauthConnectParams as u, API_KEY_PREFIX as v, getDefaultAgent as w, PREFERENCES as x, DEFAULT_API_URL as y, resolveSession as z };
+export { getSavedTheme as A, resolveSession as B, deleteConfig as C, getPreference as D, getLastSeenVersion as E, recordDefaultAgent as F, setLastSeenVersion as G, saveConfig as H, resolveAppUrl as I, resolveChatAuth as L, getStoredApiKeyId as M, getStoredApiKeyWorkspaceName as N, getPromptHistoryPath as O, getUpdateCheckDisabled as P, resolveConfig as R, PREFERENCES as S, getDefaultAgent as T, saveSession as U, resolveWebUrl as V, saveTheme as W, API_KEYS_URL as _, runPrint as a, DEFAULT_API_URL as b, cardActionErrorMessage as c, reconcileMaskedInput as d, resolveConnectUrl as f, specKeyFor as g, parseConnectCard as h, resolveAgent as i, getShareMachineDefault as j, getReviewStateDir as k, parseExternalOauthConnectParams as l, computeSettledLabel as m, messageGet as n, toPrintError as o, composeQuestionAnswer as p, readStdin as r, MASK_CHAR as s, collectRunText as t, parseOauthConnectParams as u, API_KEY_FAMILY_PREFIX as v, getConfigPath as w, DEFAULT_APP_URL as x, API_KEY_PREFIX as y, resolveManagementAuth as z };

package/dist/js/{print-share-azWHVxpt.mjs → print-share-D20YvVbb.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { n as printError } from "./output-wY0VQDea.mjs";
+import { n as printError } from "./output-C9mb3sUB.mjs";
 
 //#region src/chat/print-share.ts
 /**
@@ -14,7 +14,7 @@ import { n as printError } from "./output-wY0VQDea.mjs";
 * the reply (and to --json).
 */
 async function connectMachineShare({ appUrl, sessionToken, timeoutHint }) {
-	const { PortalClient } = await import("./client-DCwVlAal.mjs");
+	const { PortalClient } = await import("./client-CSKr4Swa.mjs");
 	const { defaultTlsCertSource } = await import("./tls-cert-CLgSQALB.mjs");
 	let signalConnected;
 	const connected = new Promise((resolve) => {

package/dist/js/{rest-B5DVQ1LM.mjs → rest-8QGtGZIO.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as HttpError } from "./http-error-UHH3mVBF.mjs";
-import { n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-Bbe-RhMy.mjs";
+import { n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-BtHVI0y6.mjs";
+import { t as HttpError } from "./http-error-BF2NZZE3.mjs";
 import "./billing-blocked-D3l5kJlX.mjs";
 
 export { createRestClient };

package/dist/js/{rest-Bbe-RhMy.mjs → rest-BtHVI0y6.mjs}

@@ -1,9 +1,14 @@
 #!/usr/bin/env node
-import { t as HttpError } from "./http-error-UHH3mVBF.mjs";
+import { t as HttpError } from "./http-error-BF2NZZE3.mjs";
 import { a as billingBlockedOutcomeSchema } from "./billing-blocked-D3l5kJlX.mjs";
 import { z } from "zod";
 import { createParser } from "eventsource-parser";
 
+//#region package.json
+var name = "skydive-cli";
+var version = "0.5.0-beta.46";
+
+//#endregion
 //#region src/chat/util.ts
 /** Narrowing helper for the many `unknown` payloads the chat stream and
 * tool inputs/outputs carry. A type predicate (not an `as` cast), so call
@@ -18,6 +23,7 @@ function errorMessage(err) {
 
 //#endregion
 //#region src/chat/api/rest.ts
+const CLI_VERSION_HEADER = "x-skydive-cli-version";
 const ERROR_DETAIL_MAX_BODY = 2e3;
 /**
 * Fullest renderable text for a thrown value. `HttpError.message` clips the
@@ -104,7 +110,8 @@ const MAX_STREAM_RECONNECTS = 5;
 function createRestClient({ appUrl, sessionToken, workspaceId }) {
 	const baseHeaders = {
 		authorization: `Bearer ${sessionToken}`,
-		accept: "application/json"
+		accept: "application/json",
+		[CLI_VERSION_HEADER]: version
 	};
 	if (workspaceId) baseHeaders["x-workspace-id"] = workspaceId;
 	async function get(path, schema) {
@@ -147,7 +154,8 @@ function createRestClient({ appUrl, sessionToken, workspaceId }) {
 			try {
 				const headers = {
 					authorization: `Bearer ${sessionToken}`,
-					accept: "text/event-stream"
+					accept: "text/event-stream",
+					[CLI_VERSION_HEADER]: version
 				};
 				if (workspaceId) headers["x-workspace-id"] = workspaceId;
 				if (lastEventId) headers["last-event-id"] = lastEventId;
@@ -441,6 +449,7 @@ function createRestClient({ appUrl, sessionToken, workspaceId }) {
 						headers: {
 							authorization: `Bearer ${sessionToken}`,
 							accept: "text/event-stream",
+							[CLI_VERSION_HEADER]: version,
 							...workspaceId ? { "x-workspace-id": workspaceId } : {}
 						},
 						signal
@@ -687,4 +696,4 @@ const conversationStreamEventSchema = z.discriminatedUnion("kind", [
 ]);
 
 //#endregion
-export { isRecord as a, errorMessage as i, errorDetail as n, sendErrorMessage as r, createRestClient as t };
+export { isRecord as a, errorMessage as i, errorDetail as n, name as o, sendErrorMessage as r, version as s, createRestClient as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skydive-cli",
-  "version": "0.5.0-beta.41",
+  "version": "0.5.0-beta.46",
   "description": "Skydive CLI — cloud agents from the command line",
   "homepage": "https://skydive.com",
   "license": "MIT",
@@ -69,9 +69,9 @@
   },
   "//optionalDependencies": "The per-platform binary packages (skydive-cli-<os>-<arch>) are INTENTIONALLY not committed here. They are published by release-skydive-cli-binaries.yml and injected — pinned to the exact version being published — into the published launcher's optionalDependencies at release time (scripts/prepare-platform-packages.mjs --pin-version, run in release-skydive-cli.yml). Committing them would make `yarn install` try to resolve versions that only exist post-publish, breaking local dev and CI. npm installs of a published skydive-cli still get them (os/cpu-gated); the launcher (src/launcher.ts) resolves and execs the matching one. Local dev never needs them: it runs the JS bundle or `build:binary` directly.",
   "optionalDependencies": {
-    "skydive-cli-darwin-arm64": "0.5.0-beta.41",
-    "skydive-cli-darwin-x64": "0.5.0-beta.41",
-    "skydive-cli-linux-x64": "0.5.0-beta.41",
-    "skydive-cli-linux-arm64": "0.5.0-beta.41"
+    "skydive-cli-darwin-arm64": "0.5.0-beta.46",
+    "skydive-cli-darwin-x64": "0.5.0-beta.46",
+    "skydive-cli-linux-x64": "0.5.0-beta.46",
+    "skydive-cli-linux-arm64": "0.5.0-beta.46"
   }
 }

package/dist/js/client-DCwVlAal.mjs

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-import { t as PortalClient } from "./client-DMYwKALl.mjs";
-import "./api-DQCaztBg.mjs";
-
-export { PortalClient };

package/dist/js/daemon-By-I_HVM.mjs

@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-import "./client-DMYwKALl.mjs";
-import { a as runPortalDaemon, i as queryDaemonStatus, n as ensureDaemonRunning, o as startPortalDaemon, r as isDaemonListening, s as stopDaemon, t as PortalDaemon } from "./daemon-D8WoX21I.mjs";
-import "./tls-cert-CV-pwxVN.mjs";
-import "./api-DQCaztBg.mjs";
-
-export { runPortalDaemon };

package/dist/js/daemon-client-_SVAskeO.mjs

@@ -1,8 +0,0 @@
-#!/usr/bin/env node
-import "./client-DMYwKALl.mjs";
-import "./daemon-D8WoX21I.mjs";
-import "./tls-cert-CV-pwxVN.mjs";
-import "./api-DQCaztBg.mjs";
-import { t as PortalDaemonClient } from "./daemon-client-Bp5DMeIi.mjs";
-
-export { PortalDaemonClient };