skydive-cli 0.5.0-beta.44 → 0.5.0-beta.48

package/dist/js/bin.mjs

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
-import { o as name, s as version, t as createRestClient } from "./rest-DpsJUYTL.mjs";
-import { B as resolveSession$1, C as deleteConfig, D as getPreference, E as getLastSeenVersion, G as setLastSeenVersion, H as saveConfig, I as resolveAppUrl, L as resolveChatAuth, M as getStoredApiKeyId, N as getStoredApiKeyWorkspaceName, O as getPromptHistoryPath, P as getUpdateCheckDisabled, R as resolveConfig, S as PREFERENCES, T as getDefaultAgent, U as saveSession, _ as API_KEYS_URL, b as DEFAULT_API_URL, i as resolveAgent$1, j as getShareMachineDefault, v as API_KEY_FAMILY_PREFIX, w as getConfigPath, y as API_KEY_PREFIX, z as resolveManagementAuth } from "./print-Ds16-Q4O.mjs";
-import { A as installAgentAlias, B as resolveWorkspaceId, D as machineOsFromPlatform, E as buildImportSeedPrompt, F as detectShell, I as ensureActiveOrganization, L as getActiveWorkspaceId, M as takenAliasNames, N as SUPPORTED_SHELLS, O as aliasActivationHint, P as defaultInstallEnv, R as getSessionIdentity, V as setActiveWorkspace, c as getAutomaticLogsDir, j as slugifyAliasName, k as dedupeAliasName, l as maybeStartProfiling, o as brandHelpArt, t as installCrashHandler, u as profileDir, w as themes, z as listWorkspaces } from "./install-DrtNldUN.mjs";
+import { o as name, s as version, t as createRestClient } from "./rest-B-dizrBw.mjs";
+import { B as resolveSession$1, C as deleteConfig, D as getPreference, E as getLastSeenVersion, G as setLastSeenVersion, H as saveConfig, I as resolveAppUrl, L as resolveChatAuth, M as getStoredApiKeyId, N as getStoredApiKeyWorkspaceName, O as getPromptHistoryPath, P as getUpdateCheckDisabled, R as resolveConfig, S as PREFERENCES, T as getDefaultAgent, U as saveSession, _ as API_KEYS_URL, b as DEFAULT_API_URL, i as resolveAgent$1, j as getShareMachineDefault, v as API_KEY_FAMILY_PREFIX, w as getConfigPath, y as API_KEY_PREFIX, z as resolveManagementAuth } from "./print-SD_y9CTF.mjs";
+import { A as installAgentAlias, B as resolveWorkspaceId, D as machineOsFromPlatform, E as buildImportSeedPrompt, F as detectShell, I as ensureActiveOrganization, L as getActiveWorkspaceId, M as takenAliasNames, N as SUPPORTED_SHELLS, O as aliasActivationHint, P as defaultInstallEnv, R as getSessionIdentity, V as setActiveWorkspace, c as getAutomaticLogsDir, j as slugifyAliasName, k as dedupeAliasName, l as maybeStartProfiling, o as brandHelpArt, t as installCrashHandler, u as profileDir, w as themes, z as listWorkspaces } from "./install-BOtarTEl.mjs";
 import { n as printError, r as printTable, t as output } from "./output-C9mb3sUB.mjs";
 import { t as HttpError } from "./http-error-BF2NZZE3.mjs";
 import "./billing-blocked-D3l5kJlX.mjs";
-import { r as resolveMachineIdentity } from "./client-BnpgrtCC.mjs";
-import { i as queryDaemonStatus, l as PORTAL_DAEMON_FLAG, n as ensureDaemonRunning, s as stopDaemon, u as daemonPaths } from "./daemon-w8vtZ81t.mjs";
+import { r as resolveMachineIdentity } from "./client-C2lPer4b.mjs";
+import { d as daemonPaths, i as queryDaemonStatus, n as ensureDaemonRunning, s as stopDaemon, u as PORTAL_DAEMON_FLAG } from "./daemon-B7Wv4P6W.mjs";
 import "./tls-cert-CV-pwxVN.mjs";
 import { i as grantPortalAccess, n as fetchPortalDevices, o as registerPortalDevice, r as findThisDevice, s as revokePortalAccess } from "./api-TwLD7ibI.mjs";
 import { a as encodeFsRequest, i as decodeFsResponse, n as SANDBOX_STREAM_PATH, r as streamSpecToQuery, t as SandboxStream } from "./client-Btq6bMzX.mjs";
@@ -1588,7 +1588,7 @@ const importCommand = {
 				process.exit(1);
 			}
 		}
-		const { runChat } = await import("./boot-ClKjP9Mn.mjs");
+		const { runChat } = await import("./boot-BoqVFa4M.mjs");
 		await runChat({
 			appUrl,
 			sessionToken: session.value.sessionToken,
@@ -1618,7 +1618,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 		printError(`${session.error.message} For non-interactive use, run \`skydive auth login --web\` first, or set SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { connectMachineShare } = await import("./print-share-Df6eAG12.mjs");
+	const { connectMachineShare } = await import("./print-share-D20YvVbb.mjs");
 	const machineShare = await connectMachineShare({
 		appUrl,
 		sessionToken: session.value.sessionToken,
@@ -1626,7 +1626,7 @@ async function runImportPrintMode({ argv, appUrl }) {
 	});
 	const extra = (argv.print ?? "").trim();
 	const prompt = buildImportSeedPrompt(process.cwd(), machineOsFromPlatform(process.platform)) + (extra ? `\n\nAdditional instructions: ${extra}` : "");
-	const { runPrint } = await import("./print-Dc-xRapT.mjs");
+	const { runPrint } = await import("./print-ejS3eAZz.mjs");
 	try {
 		const result = await runPrint({
 			appUrl,
@@ -2033,7 +2033,7 @@ const chatCommand = {
 			sessionToken: auth.value.token,
 			agentSelector: argv.agent ?? null
 		});
-		const { runChat } = await import("./boot-ClKjP9Mn.mjs");
+		const { runChat } = await import("./boot-BoqVFa4M.mjs");
 		await runChat({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -2117,7 +2117,7 @@ async function runPrintMode({ argv, appUrl }) {
 		printError(`${auth.error.message} For non-interactive use, run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 		process.exit(1);
 	}
-	const { runPrint, readStdin } = await import("./print-Dc-xRapT.mjs");
+	const { runPrint, readStdin } = await import("./print-ejS3eAZz.mjs");
 	const workspaceId = await resolveWorkspaceFlag({
 		appUrl,
 		sessionToken: auth.value.token,
@@ -2147,7 +2147,7 @@ async function runPrintMode({ argv, appUrl }) {
 			process.exit(1);
 		}
 	} else {
-		const { connectMachineShare } = await import("./print-share-Df6eAG12.mjs");
+		const { connectMachineShare } = await import("./print-share-D20YvVbb.mjs");
 		machineShare = await connectMachineShare({
 			appUrl: auth.value.appUrl,
 			sessionToken: auth.value.token,
@@ -2212,7 +2212,7 @@ const getCommand$1 = {
 			printError(`${auth.error.message} Run \`skydive auth login\` first, or set SKYDIVE_API_KEY / SKYDIVE_SESSION_TOKEN.`);
 			process.exit(1);
 		}
-		const { messageGet } = await import("./print-Dc-xRapT.mjs");
+		const { messageGet } = await import("./print-ejS3eAZz.mjs");
 		try {
 			const result = await messageGet({
 				appUrl: auth.value.appUrl,
@@ -2415,7 +2415,7 @@ const switchCommand = {
 				printError("The workspace picker needs the Bun runtime and it could not be set up automatically. Pass a workspace slug instead, or install Bun and retry.");
 				process.exit(1);
 			}
-			const { runWorkspacePicker } = await import("./boot-ClKjP9Mn.mjs");
+			const { runWorkspacePicker } = await import("./boot-BoqVFa4M.mjs");
 			await runWorkspacePicker(session);
 			return;
 		}
@@ -2494,7 +2494,7 @@ const openCommand = {
 		const agent = argv.agent ? resolveAgent$1((await fetchPortalDevices(session)).agents, argv.agent) : null;
 		const cwd = argv.cwd ? path.resolve(argv.cwd) : process.cwd();
 		const { machineName } = await resolveMachineIdentity(null);
-		const { PortalDaemonClient } = await import("./daemon-client-D5YCk5Hc.mjs");
+		const { PortalDaemonClient } = await import("./daemon-client-DL3eNr6N.mjs");
 		let lastLine = "";
 		let signalConnected;
 		const connected = new Promise((resolve) => {
@@ -2808,8 +2808,8 @@ const sandboxCommand = {
 	}).example("skydive sandbox --agent grace", "Live terminal (Ctrl-] detaches)").example("skydive sandbox --agent grace -- tail -n 50 /tmp/harness.log", "One-shot command (use `--` so its flags reach the sandbox)").example("skydive sandbox --agent grace -- sh -c 'ls /tmp | wc -l'", "Shell features go through an explicit `sh -c`"),
 	handler: async (argv) => {
 		const session = requireSession(argv);
-		const { createRestClient } = await import("./rest-Do3mPVpC.mjs");
-		const { resolveAgent } = await import("./print-Dc-xRapT.mjs");
+		const { createRestClient } = await import("./rest-Cz-aN-ME.mjs");
+		const { resolveAgent } = await import("./print-ejS3eAZz.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken
@@ -3077,8 +3077,8 @@ const fsEditCommand = {
 	handler: async (argv) => {
 		const session = requireSession(argv);
 		const remotePath = argv.path;
-		const { createRestClient } = await import("./rest-Do3mPVpC.mjs");
-		const { resolveAgent } = await import("./print-Dc-xRapT.mjs");
+		const { createRestClient } = await import("./rest-Cz-aN-ME.mjs");
+		const { resolveAgent } = await import("./print-ejS3eAZz.mjs");
 		const client = createRestClient({
 			appUrl: session.appUrl,
 			sessionToken: session.sessionToken
@@ -4548,7 +4548,7 @@ if (process.argv.includes(UPDATE_WORKER_FLAG)) {
 	process.exit(0);
 }
 if (process.argv.includes(PORTAL_DAEMON_FLAG)) {
-	const { runPortalDaemon } = await import("./daemon-mLypjXdu.mjs");
+	const { runPortalDaemon } = await import("./daemon-B57zYVAN.mjs");
 	runPortalDaemon(process.argv);
 } else runCli();
 function runCli() {

package/dist/js/{boot-ClKjP9Mn.mjs → boot-BoqVFa4M.mjs}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import { a as isRecord, i as errorMessage, n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-DpsJUYTL.mjs";
-import { A as getSavedTheme, F as recordDefaultAgent, V as resolveWebUrl, W as saveTheme, b as DEFAULT_API_URL, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, g as specKeyFor, h as parseConnectCard, i as resolveAgent, k as getReviewStateDir, l as parseExternalOauthConnectParams, m as computeSettledLabel, p as composeQuestionAnswer, s as MASK_CHAR, u as parseOauthConnectParams, w as getConfigPath, x as DEFAULT_APP_URL } from "./print-Ds16-Q4O.mjs";
-import { A as installAgentAlias, C as themeVersion, D as machineOsFromPlatform, F as detectShell, L as getActiveWorkspaceId, M as takenAliasNames, O as aliasActivationHint, S as themeModeFromColorFgBg, T as themesForMode, V as setActiveWorkspace, _ as monoTheme, a as WORDMARK, b as themeForMode, d as profilingEnabled, f as record, g as findTheme, h as applyTheme, i as MARK_CELLS, j as slugifyAliasName, k as dedupeAliasName, m as DEFAULT_THEME_ID, n as buildCrashReport, p as writeArtifact, r as writeCrashReport, s as splashFitsWidth, t as installCrashHandler, v as noColorRequested, x as themeMode, y as theme, z as listWorkspaces } from "./install-DrtNldUN.mjs";
+import { a as isRecord, i as errorMessage, n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-B-dizrBw.mjs";
+import { A as getSavedTheme, F as recordDefaultAgent, V as resolveWebUrl, W as saveTheme, b as DEFAULT_API_URL, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, g as specKeyFor, h as parseConnectCard, i as resolveAgent, k as getReviewStateDir, l as parseExternalOauthConnectParams, m as computeSettledLabel, p as composeQuestionAnswer, s as MASK_CHAR, u as parseOauthConnectParams, w as getConfigPath, x as DEFAULT_APP_URL } from "./print-SD_y9CTF.mjs";
+import { A as installAgentAlias, C as themeVersion, D as machineOsFromPlatform, F as detectShell, L as getActiveWorkspaceId, M as takenAliasNames, O as aliasActivationHint, S as themeModeFromColorFgBg, T as themesForMode, V as setActiveWorkspace, _ as monoTheme, a as WORDMARK, b as themeForMode, d as profilingEnabled, f as record, g as findTheme, h as applyTheme, i as MARK_CELLS, j as slugifyAliasName, k as dedupeAliasName, m as DEFAULT_THEME_ID, n as buildCrashReport, p as writeArtifact, r as writeCrashReport, s as splashFitsWidth, t as installCrashHandler, v as noColorRequested, x as themeMode, y as theme, z as listWorkspaces } from "./install-BOtarTEl.mjs";
 import { t as HttpError } from "./http-error-BF2NZZE3.mjs";
 import { i as billingBlockedOutcomeFromSendResponse } from "./billing-blocked-D3l5kJlX.mjs";
-import { t as PortalClient } from "./client-BnpgrtCC.mjs";
-import "./daemon-w8vtZ81t.mjs";
+import { t as PortalClient } from "./client-C2lPer4b.mjs";
+import "./daemon-B7Wv4P6W.mjs";
 import { t as defaultTlsCertSource } from "./tls-cert-CV-pwxVN.mjs";
 import "./api-TwLD7ibI.mjs";
 import { t as SandboxStream } from "./client-Btq6bMzX.mjs";
-import { t as PortalDaemonClient } from "./daemon-client-KKNss0NK.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-Btr9rmKl.mjs";
 import { t as runRawPtyPassthrough } from "./raw-pty-D5PhKZSl.mjs";
 import * as os$1 from "node:os";
 import { homedir, platform, release, tmpdir } from "node:os";
@@ -4702,7 +4702,11 @@ const maxLines = 6;
 function ToolRead({ item }) {
 	const glyph = toolGlyph(item.state);
 	const input = isRecord(item.input) ? item.input : {};
-	const filePath = typeof input.filePath === "string" ? input.filePath : null;
+	const filePath = pickString(input, [
+		"path",
+		"filePath",
+		"file"
+	]);
 	const offset = typeof input.offset === "number" ? input.offset : null;
 	const limit = typeof input.limit === "number" ? input.limit : null;
 	const header = filePath ? offset !== null ? `${filePath}:L${offset}${limit ? `-L${offset + limit - 1}` : ""}` : filePath : "(unknown path)";
@@ -7593,6 +7597,7 @@ function usePromptHistory({ filePath }) {
 	const entriesRef = useRef([]);
 	const indexRef = useRef(0);
 	const shownRef = useRef(null);
+	const draftRef = useRef("");
 	useEffect(() => {
 		if (!filePath) return;
 		let cancelled = false;
@@ -7613,6 +7618,7 @@ function usePromptHistory({ filePath }) {
 			const after = withPromptEntry(before, raw);
 			indexRef.current = 0;
 			shownRef.current = null;
+			draftRef.current = "";
 			if (after === before) return;
 			const trimmed = after.length < before.length + 1;
 			entriesRef.current = after;
@@ -7628,6 +7634,7 @@ function usePromptHistory({ filePath }) {
 			if (isEdited(indexRef.current, shownRef.current, currentText)) return null;
 			const result = recallPrevious(entriesRef.current, indexRef.current);
 			if (!result) return null;
+			if (indexRef.current === 0) draftRef.current = currentText;
 			indexRef.current = result.index;
 			shownRef.current = result.text;
 			return result.text;
@@ -7637,7 +7644,11 @@ function usePromptHistory({ filePath }) {
 			const result = recallNext(entriesRef.current, indexRef.current);
 			if (!result) return null;
 			indexRef.current = result.index;
-			shownRef.current = result.index === 0 ? null : result.text;
+			if (result.index === 0) {
+				shownRef.current = null;
+				return draftRef.current;
+			}
+			shownRef.current = result.text;
 			return result.text;
 		}, [])
 	};

package/dist/js/{client-BnpgrtCC.mjs → client-C2lPer4b.mjs}

@@ -568,6 +568,8 @@ var PortalClient = class {
 	legacyGrantsChecked = false;
 	wakeWatch = null;
 	lastTick = Date.now();
+	handingOff = false;
+	handoffResolve = null;
 	heartbeatConfig;
 	constructor(opts) {
 		this.opts = opts;
@@ -641,6 +643,48 @@ var PortalClient = class {
 		this.jobs = null;
 		this.ws?.close();
 		this.ws = null;
+		this.finishHandoff();
+	}
+	/**
+	* Begin a make-before-break handoff to a successor daemon. Keep the current
+	* portal socket (and thus this machine's presence claim) alive so there is no
+	* `registered but not connected` gap, but stop redialing once it closes — the
+	* successor's `claim()` supersedes us and the server closes our socket, which
+	* is our cue to step down. Resolves when the socket has closed (clean
+	* handoff) OR after `timeoutMs` (the successor never came up, so we release
+	* the slot rather than hold it forever). Idempotent.
+	*/
+	beginHandoff(timeoutMs) {
+		if (this.disposed) return Promise.resolve();
+		if (this.handingOff) return new Promise((resolve) => {
+			const prev = this.handoffResolve;
+			this.handoffResolve = () => {
+				prev?.();
+				resolve();
+			};
+		});
+		this.handingOff = true;
+		if (!this.ws) return Promise.resolve();
+		return new Promise((resolve) => {
+			let done = false;
+			const finish = () => {
+				if (done) return;
+				done = true;
+				clearTimeout(timer);
+				resolve();
+			};
+			this.handoffResolve = finish;
+			const timer = setTimeout(() => {
+				this.disable();
+				this.finishHandoff();
+			}, timeoutMs);
+			if (typeof timer.unref === "function") timer.unref();
+		});
+	}
+	finishHandoff() {
+		const resolve = this.handoffResolve;
+		this.handoffResolve = null;
+		resolve?.();
 	}
 	/**
 	* Grant one agent access to this machine (default-deny; user-initiated).
@@ -702,18 +746,18 @@ var PortalClient = class {
 			this.opts.onMachineName(identity.machineName, identity.machineNameSource);
 		}
 		let backoff = this.heartbeatConfig.initialBackoffMs;
-		while (this.enabled && !this.disposed) {
+		while (this.enabled && !this.disposed && !this.handingOff) {
 			this.setStatus("connecting");
 			try {
 				const token = await this.wsToken();
 				if (await this.runConnection(token)) backoff = this.heartbeatConfig.initialBackoffMs;
 				else backoff = Math.min(backoff * 2, this.heartbeatConfig.maxBackoffMs);
 			} catch (err) {
-				if (!this.enabled || this.disposed) break;
+				if (!this.enabled || this.disposed || this.handingOff) break;
 				this.setStatus("error", errorMessage(err));
 				backoff = Math.min(backoff * 2, this.heartbeatConfig.maxBackoffMs);
 			}
-			if (!this.enabled || this.disposed) break;
+			if (!this.enabled || this.disposed || this.handingOff) break;
 			await sleep(Math.random() * backoff);
 		}
 	}
@@ -772,6 +816,7 @@ var PortalClient = class {
 				jobs.killAll();
 				if (this.jobs === jobs) this.jobs = null;
 				if (this.ws === ws) this.ws = null;
+				if (this.handingOff) this.finishHandoff();
 				settle();
 			});
 		});

package/dist/js/client-CSKr4Swa.mjs

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import { t as PortalClient } from "./client-C2lPer4b.mjs";
+import "./api-TwLD7ibI.mjs";
+
+export { PortalClient };

package/dist/js/daemon-B57zYVAN.mjs

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import "./client-C2lPer4b.mjs";
+import { a as runPortalDaemon, c as stopDaemonForHandoff, i as queryDaemonStatus, n as ensureDaemonRunning, o as startPortalDaemon, r as isDaemonListening, s as stopDaemon, t as PortalDaemon } from "./daemon-B7Wv4P6W.mjs";
+import "./tls-cert-CV-pwxVN.mjs";
+import "./api-TwLD7ibI.mjs";
+
+export { runPortalDaemon };

package/dist/js/{daemon-w8vtZ81t.mjs → daemon-B7Wv4P6W.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { n as isRecord, t as PortalClient } from "./client-BnpgrtCC.mjs";
+import { n as isRecord, t as PortalClient } from "./client-C2lPer4b.mjs";
 import { t as defaultTlsCertSource } from "./tls-cert-CV-pwxVN.mjs";
 import os from "node:os";
 import path from "node:path";
@@ -21,7 +21,7 @@ import { access, appendFile, mkdir, readFile, unlink, writeFile } from "node:fs/
 * the commit time of the built tree is one monotonic clock they share.
 */
 function portalDaemonBuild() {
-	return "1786941153";
+	return "1787070117";
 }
 /**
 * Whether a client carrying `mine` should replace a running daemon carrying
@@ -220,6 +220,20 @@ const clientStatusSchema = z.object({ t: z.literal("status") });
 * exits — cutting live exec/tunnel connections, not just refusing new ones.
 */
 const clientShutdownSchema = z.object({ t: z.literal("shutdown") });
+/**
+* `shutdown_handoff` — a newer daemon taking over (self-update / newest-build-
+* wins) asks the incumbent to step down WITHOUT dropping the portal connection
+* first. The incumbent frees the control socket and disconnects attached CLIs
+* (they reconnect to the new daemon in ~500ms, unchanged), but KEEPS its
+* outbound portal WebSocket — and thus its presence claim — alive until the
+* new daemon has dialled out and claimed the machine's presence slot, at which
+* point the server supersedes the incumbent's socket and it exits. This is a
+* make-before-break handoff: the presence key is owned by one daemon or the
+* other for the entire takeover, so `exec`/`file write` never sees a
+* `registered but not connected` gap mid-upgrade. A bounded fallback timeout
+* ensures the incumbent still exits if the successor never comes up.
+*/
+const clientShutdownHandoffSchema = z.object({ t: z.literal("shutdown_handoff") });
 const clientMessageSchema = z.discriminatedUnion("t", [
 	clientHelloSchema,
 	clientBindSchema,
@@ -230,7 +244,8 @@ const clientMessageSchema = z.discriminatedUnion("t", [
 	clientDeclineSchema,
 	clientByeSchema,
 	clientStatusSchema,
-	clientShutdownSchema
+	clientShutdownSchema,
+	clientShutdownHandoffSchema
 ]);
 /**
 * `state` — the shared portal status, pushed to every attached client so each
@@ -357,6 +372,14 @@ function parseDaemonMessage(line) {
 */
 /** Grace period after the last client detaches before the daemon exits. */
 const IDLE_SHUTDOWN_MS = 3e4;
+/**
+* Upper bound an incumbent daemon waits, during a graceful handoff, for the
+* successor to dial out and claim presence before giving up and releasing the
+* slot itself. Comfortably above a normal successor boot + WS dial (a few
+* hundred ms to a couple of seconds), and short enough that a failed successor
+* doesn't strand the machine as reachable-but-dead for long.
+*/
+const HANDOFF_MAX_WAIT_MS = 1e4;
 var PortalDaemon = class {
 	appUrl;
 	paths;
@@ -369,6 +392,7 @@ var PortalDaemon = class {
 	persistedMachineName = null;
 	fallbackCwd;
 	idleTimer = null;
+	handingOff = false;
 	sessionToken = null;
 	deviceToken = null;
 	constructor(appUrl) {
@@ -478,6 +502,9 @@ var PortalDaemon = class {
 			case "shutdown":
 				this.forceShutdown();
 				return;
+			case "shutdown_handoff":
+				this.gracefulHandoffShutdown();
+				return;
 			default: return msg;
 		}
 	}
@@ -615,6 +642,37 @@ var PortalDaemon = class {
 		this.server?.close();
 		process.exit(0);
 	}
+	/**
+	* Graceful takeover step-down (a newer daemon is replacing us). Unlike
+	* `forceShutdown`, this does NOT drop the portal connection up front: doing so
+	* would let this machine's presence key expire (10s TTL) before the successor
+	* dials out and re-claims it, which is the `registered but not connected` gap
+	* that made `exec`/`file write` fail mid-self-update.
+	*
+	* Order matters. We free the control socket and disconnect attached CLIs
+	* first, because the successor cannot bind the singleton socket (and thus
+	* cannot start its own portal client) until we release it. But we KEEP our
+	* outbound portal WebSocket — and its presence claim — alive across that
+	* window. When the successor connects and `claim()`s the slot, the server
+	* supersedes us and closes our socket; `beginHandoff` resolves on that close
+	* and we exit. A bounded fallback inside `beginHandoff` still exits us if the
+	* successor never comes up, so we never hold a dead slot forever.
+	*/
+	async gracefulHandoffShutdown() {
+		if (this.handingOff) return;
+		this.handingOff = true;
+		for (const conn of this.conns) try {
+			conn.socket.destroy();
+		} catch (_error) {}
+		this.conns.clear();
+		this.server?.close();
+		this.server = null;
+		if (this.client) {
+			await this.client.beginHandoff(HANDOFF_MAX_WAIT_MS);
+			this.client.dispose();
+		}
+		process.exit(0);
+	}
 	async loadState() {
 		try {
 			const raw = await readFile(this.paths.statePath, "utf8");
@@ -663,7 +721,7 @@ async function ensureDaemonRunning(appUrl) {
 	if (await isDaemonListening(socketPath)) {
 		const status = await queryDaemonStatus(appUrl);
 		if (!status || !isNewerBuild(portalDaemonBuild(), status.build)) return;
-		if (await stopDaemon(appUrl) === "failed") return;
+		if (await stopDaemonForHandoff(appUrl) === "failed") return;
 	}
 	const entry = process.argv[1];
 	const args = entry ? [
@@ -758,6 +816,37 @@ async function queryDaemonStatus(appUrl) {
 	});
 }
 /**
+* Ask a running incumbent daemon to step down for a make-before-break handoff
+* (see the daemon's `gracefulHandoffShutdown`). Sends `shutdown_handoff` and
+* waits for the incumbent to release the CONTROL SOCKET — at which point the
+* successor can bind it and start its own portal client. Crucially, the
+* incumbent keeps its portal connection (and presence) alive past this point,
+* so the successor's subsequent `claim()` supersedes it with no presence gap.
+*
+* Returns `stopped` once the socket is free, `failed` if it never freed (the
+* caller should then leave the incumbent alone rather than fight it — same
+* fallback semantics as `stopDaemon`), or `not-running` if nothing was there.
+* Unlike `stopDaemon` this never SIGKILLs: the incumbent is intentionally still
+* alive (holding presence) after it frees the socket, so killing it by pid is
+* exactly the gap this path exists to avoid.
+*/
+async function stopDaemonForHandoff(appUrl) {
+	const { socketPath } = daemonPaths(appUrl);
+	if (!await isDaemonListening(socketPath)) return "not-running";
+	const sock = await connectControl(socketPath);
+	if (!sock) return "failed";
+	sock.write(encodeLine({ t: "shutdown_handoff" }));
+	for (let i = 0; i < 50; i += 1) {
+		await sleep(100);
+		if (!await isDaemonListening(socketPath)) {
+			sock.destroy();
+			return "stopped";
+		}
+	}
+	sock.destroy();
+	return "failed";
+}
+/**
 * Hard-stop a running daemon. Preferred path: send `shutdown` over the control
 * socket so it drains clients and exits cleanly. If the socket is unresponsive
 * (a wedged daemon), fall back to SIGTERM then SIGKILL by the pid the status
@@ -809,4 +898,4 @@ function sleep(ms) {
 }
 
 //#endregion
-export { runPortalDaemon as a, LOCAL_PROTOCOL_VERSION as c, encodeLine as d, makeLineParser as f, queryDaemonStatus as i, PORTAL_DAEMON_FLAG as l, ensureDaemonRunning as n, startPortalDaemon as o, parseDaemonMessage as p, isDaemonListening as r, stopDaemon as s, PortalDaemon as t, daemonPaths as u };
+export { runPortalDaemon as a, stopDaemonForHandoff as c, daemonPaths as d, encodeLine as f, queryDaemonStatus as i, LOCAL_PROTOCOL_VERSION as l, parseDaemonMessage as m, ensureDaemonRunning as n, startPortalDaemon as o, makeLineParser as p, isDaemonListening as r, stopDaemon as s, PortalDaemon as t, PORTAL_DAEMON_FLAG as u };

package/dist/js/{daemon-client-KKNss0NK.mjs → daemon-client-Btr9rmKl.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { c as LOCAL_PROTOCOL_VERSION, d as encodeLine, f as makeLineParser, n as ensureDaemonRunning, p as parseDaemonMessage, u as daemonPaths } from "./daemon-w8vtZ81t.mjs";
+import { d as daemonPaths, f as encodeLine, l as LOCAL_PROTOCOL_VERSION, m as parseDaemonMessage, n as ensureDaemonRunning, p as makeLineParser } from "./daemon-B7Wv4P6W.mjs";
 import { randomUUID } from "node:crypto";
 import { connect } from "node:net";
 

package/dist/js/daemon-client-DL3eNr6N.mjs

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import "./client-C2lPer4b.mjs";
+import "./daemon-B7Wv4P6W.mjs";
+import "./tls-cert-CV-pwxVN.mjs";
+import "./api-TwLD7ibI.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-Btr9rmKl.mjs";
+
+export { PortalDaemonClient };

package/dist/js/{install-DrtNldUN.mjs → install-BOtarTEl.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { s as version$1 } from "./rest-DpsJUYTL.mjs";
-import { w as getConfigPath } from "./print-Ds16-Q4O.mjs";
+import { s as version$1 } from "./rest-B-dizrBw.mjs";
+import { w as getConfigPath } from "./print-SD_y9CTF.mjs";
 import os from "node:os";
 import path from "node:path";
 import { err, ok } from "neverthrow";

package/dist/js/{print-Ds16-Q4O.mjs → print-SD_y9CTF.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { a as isRecord, i as errorMessage, r as sendErrorMessage, t as createRestClient } from "./rest-DpsJUYTL.mjs";
+import { a as isRecord, i as errorMessage, r as sendErrorMessage, t as createRestClient } from "./rest-B-dizrBw.mjs";
 import { t as HttpError } from "./http-error-BF2NZZE3.mjs";
 import { i as billingBlockedOutcomeFromSendResponse, n as BillingBlockedError } from "./billing-blocked-D3l5kJlX.mjs";
 import path from "node:path";

package/dist/js/{print-Dc-xRapT.mjs → print-ejS3eAZz.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import "./rest-DpsJUYTL.mjs";
-import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-Ds16-Q4O.mjs";
+import "./rest-B-dizrBw.mjs";
+import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-SD_y9CTF.mjs";
 import "./billing-blocked-D3l5kJlX.mjs";
 
 export { messageGet, readStdin, resolveAgent, runPrint };

package/dist/js/{print-share-Df6eAG12.mjs → print-share-D20YvVbb.mjs}

@@ -14,7 +14,7 @@ import { n as printError } from "./output-C9mb3sUB.mjs";
 * the reply (and to --json).
 */
 async function connectMachineShare({ appUrl, sessionToken, timeoutHint }) {
-	const { PortalClient } = await import("./client-Cga4PJUc.mjs");
+	const { PortalClient } = await import("./client-CSKr4Swa.mjs");
 	const { defaultTlsCertSource } = await import("./tls-cert-CLgSQALB.mjs");
 	let signalConnected;
 	const connected = new Promise((resolve) => {

package/dist/js/{rest-DpsJUYTL.mjs → rest-B-dizrBw.mjs}

@@ -6,7 +6,7 @@ import { createParser } from "eventsource-parser";
 
 //#region package.json
 var name = "skydive-cli";
-var version = "0.5.0-beta.44";
+var version = "0.5.0-beta.48";
 
 //#endregion
 //#region src/chat/util.ts

package/dist/js/{rest-Do3mPVpC.mjs → rest-Cz-aN-ME.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-DpsJUYTL.mjs";
+import { n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-B-dizrBw.mjs";
 import { t as HttpError } from "./http-error-BF2NZZE3.mjs";
 import "./billing-blocked-D3l5kJlX.mjs";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skydive-cli",
-  "version": "0.5.0-beta.44",
+  "version": "0.5.0-beta.48",
   "description": "Skydive CLI — cloud agents from the command line",
   "homepage": "https://skydive.com",
   "license": "MIT",
@@ -69,9 +69,9 @@
   },
   "//optionalDependencies": "The per-platform binary packages (skydive-cli-<os>-<arch>) are INTENTIONALLY not committed here. They are published by release-skydive-cli-binaries.yml and injected — pinned to the exact version being published — into the published launcher's optionalDependencies at release time (scripts/prepare-platform-packages.mjs --pin-version, run in release-skydive-cli.yml). Committing them would make `yarn install` try to resolve versions that only exist post-publish, breaking local dev and CI. npm installs of a published skydive-cli still get them (os/cpu-gated); the launcher (src/launcher.ts) resolves and execs the matching one. Local dev never needs them: it runs the JS bundle or `build:binary` directly.",
   "optionalDependencies": {
-    "skydive-cli-darwin-arm64": "0.5.0-beta.44",
-    "skydive-cli-darwin-x64": "0.5.0-beta.44",
-    "skydive-cli-linux-x64": "0.5.0-beta.44",
-    "skydive-cli-linux-arm64": "0.5.0-beta.44"
+    "skydive-cli-darwin-arm64": "0.5.0-beta.48",
+    "skydive-cli-darwin-x64": "0.5.0-beta.48",
+    "skydive-cli-linux-x64": "0.5.0-beta.48",
+    "skydive-cli-linux-arm64": "0.5.0-beta.48"
   }
 }

package/dist/js/client-Cga4PJUc.mjs

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-import { t as PortalClient } from "./client-BnpgrtCC.mjs";
-import "./api-TwLD7ibI.mjs";
-
-export { PortalClient };

package/dist/js/daemon-client-D5YCk5Hc.mjs

@@ -1,8 +0,0 @@
-#!/usr/bin/env node
-import "./client-BnpgrtCC.mjs";
-import "./daemon-w8vtZ81t.mjs";
-import "./tls-cert-CV-pwxVN.mjs";
-import "./api-TwLD7ibI.mjs";
-import { t as PortalDaemonClient } from "./daemon-client-KKNss0NK.mjs";
-
-export { PortalDaemonClient };

package/dist/js/daemon-mLypjXdu.mjs

@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-import "./client-BnpgrtCC.mjs";
-import { a as runPortalDaemon, i as queryDaemonStatus, n as ensureDaemonRunning, o as startPortalDaemon, r as isDaemonListening, s as stopDaemon, t as PortalDaemon } from "./daemon-w8vtZ81t.mjs";
-import "./tls-cert-CV-pwxVN.mjs";
-import "./api-TwLD7ibI.mjs";
-
-export { runPortalDaemon };