skydive-cli 0.5.0-beta.48 → 0.5.0-beta.52

package/dist/js/{boot-BoqVFa4M.mjs → boot-D_VFIRJj.mjs}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import { a as isRecord, i as errorMessage, n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-B-dizrBw.mjs";
-import { A as getSavedTheme, F as recordDefaultAgent, V as resolveWebUrl, W as saveTheme, b as DEFAULT_API_URL, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, g as specKeyFor, h as parseConnectCard, i as resolveAgent, k as getReviewStateDir, l as parseExternalOauthConnectParams, m as computeSettledLabel, p as composeQuestionAnswer, s as MASK_CHAR, u as parseOauthConnectParams, w as getConfigPath, x as DEFAULT_APP_URL } from "./print-SD_y9CTF.mjs";
-import { A as installAgentAlias, C as themeVersion, D as machineOsFromPlatform, F as detectShell, L as getActiveWorkspaceId, M as takenAliasNames, O as aliasActivationHint, S as themeModeFromColorFgBg, T as themesForMode, V as setActiveWorkspace, _ as monoTheme, a as WORDMARK, b as themeForMode, d as profilingEnabled, f as record, g as findTheme, h as applyTheme, i as MARK_CELLS, j as slugifyAliasName, k as dedupeAliasName, m as DEFAULT_THEME_ID, n as buildCrashReport, p as writeArtifact, r as writeCrashReport, s as splashFitsWidth, t as installCrashHandler, v as noColorRequested, x as themeMode, y as theme, z as listWorkspaces } from "./install-BOtarTEl.mjs";
+import { a as isRecord, i as errorMessage, n as errorDetail, r as sendErrorMessage, t as createRestClient } from "./rest-DkuT5_oX.mjs";
+import { A as getSavedTheme, F as recordDefaultAgent, V as resolveWebUrl, W as saveTheme, b as DEFAULT_API_URL, c as cardActionErrorMessage, d as reconcileMaskedInput, f as resolveConnectUrl, g as specKeyFor, h as parseConnectCard, i as resolveAgent, k as getReviewStateDir, l as parseExternalOauthConnectParams, m as computeSettledLabel, p as composeQuestionAnswer, s as MASK_CHAR, u as parseOauthConnectParams, w as getConfigPath, x as DEFAULT_APP_URL } from "./print-DR6Gas-M.mjs";
+import { A as installAgentAlias, C as themeVersion, D as machineOsFromPlatform, F as detectShell, L as getActiveWorkspaceId, M as takenAliasNames, O as aliasActivationHint, S as themeModeFromColorFgBg, T as themesForMode, V as setActiveWorkspace, _ as monoTheme, a as WORDMARK, b as themeForMode, d as profilingEnabled, f as record, g as findTheme, h as applyTheme, i as MARK_CELLS, j as slugifyAliasName, k as dedupeAliasName, m as DEFAULT_THEME_ID, n as buildCrashReport, p as writeArtifact, r as writeCrashReport, s as splashFitsWidth, t as installCrashHandler, v as noColorRequested, x as themeMode, y as theme, z as listWorkspaces } from "./install-BBplm-Zp.mjs";
 import { t as HttpError } from "./http-error-BF2NZZE3.mjs";
 import { i as billingBlockedOutcomeFromSendResponse } from "./billing-blocked-D3l5kJlX.mjs";
-import { t as PortalClient } from "./client-C2lPer4b.mjs";
-import "./daemon-B7Wv4P6W.mjs";
+import { t as PortalClient } from "./client-aFwHzCPG.mjs";
+import "./daemon-uzpOdRPL.mjs";
 import { t as defaultTlsCertSource } from "./tls-cert-CV-pwxVN.mjs";
 import "./api-TwLD7ibI.mjs";
 import { t as SandboxStream } from "./client-Btq6bMzX.mjs";
-import { t as PortalDaemonClient } from "./daemon-client-Btr9rmKl.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-Cfi66Xy9.mjs";
 import { t as runRawPtyPassthrough } from "./raw-pty-D5PhKZSl.mjs";
 import * as os$1 from "node:os";
 import { homedir, platform, release, tmpdir } from "node:os";
@@ -1565,82 +1565,228 @@ function hostOf(url) {
 }
 
 //#endregion
-//#region src/chat/tui/status-bar.tsx
+//#region src/chat/tui/chunks/frame.tsx
+/** Status glyph + color for a tool's lifecycle state. */
+function toolGlyph(state) {
+	switch (state) {
+		case "streaming":
+		case "input-ready": return {
+			ch: "◐",
+			color: theme.warning
+		};
+		case "output-ready": return {
+			ch: "✓",
+			color: theme.success
+		};
+		case "error": return {
+			ch: "✗",
+			color: theme.error
+		};
+	}
+}
+/** Truncate a single line with an ellipsis. */
+function truncate(line, maxLen) {
+	return line.length > maxLen ? `${line.slice(0, maxLen - 1)}…` : line;
+}
 /**
-* Top-of-screen status line. Mirrors what's in the title of most
-* editor TUIs: who you are, where you're connected, what you're
-* looking at.
+* Compact a block of tool output for the transcript: truncate over-long
+* lines (so a giant single-line JSON blob doesn't wrap to a wall) and cap
+* the line count, with a "+N more" tail that doubles as the click-to-expand
+* affordance. Expanded blocks render through `ExpandedLines` instead —
+* full content, word-wrapped, nothing clipped.
 */
-function StatusBar({ rightHint }) {
-	const appUrl = useStore((s) => s.appUrl);
-	const workspaceName = useStore((s) => s.workspaceName);
-	const screen = useStore((s) => s.screen);
-	const chatTitle = useStore((s) => s.chatTitle);
-	const portal = useStore((s) => s.portal);
-	const left = headerLeftLabel(appUrl, workspaceName);
-	const middle = screenLabel(screen, chatTitle);
-	const share = portalIndicator(portal, screenAgentId(screen));
+function clipLines(text, { maxLines, maxLineLen }) {
+	const lines = text.replace(/\t/g, "  ").split("\n");
+	const out = lines.slice(0, maxLines).map((line) => truncate(line, maxLineLen));
+	if (lines.length > maxLines) out.push(`… +${lines.length - maxLines} more lines · click to expand`);
+	return out;
+}
+/**
+* Split a block for the expanded view: tabs normalised, no line cap, no
+* per-line truncation — rendering word-wraps instead. Blank lines become a
+* single space so they keep their row (an empty <text> collapses).
+*/
+function expandLines(text) {
+	return text.replace(/\t/g, "  ").split("\n").map((line) => line.length === 0 ? " " : line);
+}
+/**
+* Full, untruncated block content for an expanded view: every line kept and
+* word-wrapped by the terminal instead of ellipsis-clipped.
+*/
+function ExpandedLines({ text, fg }) {
+	return /* @__PURE__ */ jsx("box", {
+		style: { flexDirection: "column" },
+		children: expandLines(text).map((line, idx) => /* @__PURE__ */ jsx("text", {
+			fg,
+			style: { wrapMode: "word" },
+			children: line
+		}, idx))
+	});
+}
+/** Whether a block of text has lines hidden by the collapsed line cap. */
+function isClipped(text, maxLines) {
+	let count = 1;
+	for (let i = 0; i < text.length; i++) {
+		if (text.charCodeAt(i) === 10) count++;
+		if (count > maxLines) return true;
+	}
+	return false;
+}
+/** Dim tail line under an expanded block: click anywhere on it to fold. */
+function CollapseHint() {
+	return /* @__PURE__ */ jsx("text", {
+		fg: theme.dim,
+		children: "· click to collapse"
+	});
+}
+/** Collapsed line cap for tool error output. */
+const maxErrorLines = 8;
+/**
+* Character budget for a collapsed error block, sized so the block still
+* costs about `maxErrorLines` rows on a conventional 80-column terminal.
+* Error lines wrap instead of clipping, so without this a single
+* multi-kilobyte line (a raw JSON body, a minified stack) would wrap into a
+* wall of scrollback.
+*/
+const maxErrorChars = maxErrorLines * 80;
+/**
+* Squeeze the vertical dead space out of a block: leading and trailing blank
+* lines dropped, runs of blank lines collapsed to one. A failing command's
+* error text arrives as stderr (newline-terminated) plus a blank-line-
+* separated `Command exited with code N`, which otherwise renders as a
+* two-row hole in the middle of the block.
+*/
+function tightenBlanks(text) {
+	return text.replace(/\n{3,}/g, "\n\n").replace(/^\n+/, "").replace(/\s+$/, "");
+}
+/**
+* Collapsed form of an error block: whole lines, up to the line cap and the
+* character budget, left for the renderer to word-wrap. Unlike ok output,
+* errors are not clipped at a fixed column — the reason a command failed is
+* usually in the tail of the message, so an ellipsis at column 100 hides the
+* one thing the block exists to say.
+*/
+function collapseError(text) {
+	const source = expandLines(text);
+	const lines = [];
+	let room = maxErrorChars;
+	let cut = false;
+	for (const line of source) {
+		if (lines.length === maxErrorLines || room <= 0) break;
+		if (line.length > room) {
+			lines.push(truncate(line, room));
+			cut = true;
+			break;
+		}
+		lines.push(line);
+		room -= line.length;
+	}
+	const hidden = source.length - lines.length;
+	return {
+		lines,
+		hidden,
+		clipped: cut || hidden > 0
+	};
+}
+/** Whether a collapsed error block hides any of its text. */
+function isErrorClipped(text) {
+	return collapseError(tightenBlanks(text)).clipped;
+}
+/**
+* Tool error output, clamped like ok output: collapsed it clips to
+* `maxErrorLines` with the "+N more · click to expand" tail; expanded it
+* renders in full. Same click-to-toggle box as the rest of the block — a
+* failing command's output shouldn't flood the scrollback just because it
+* arrived on the error channel.
+*/
+function ErrorLines({ text, expanded }) {
+	const tidy = tightenBlanks(text);
+	if (expanded) return /* @__PURE__ */ jsx(ExpandedLines, {
+		text: tidy,
+		fg: theme.error
+	});
+	const { lines, hidden, clipped } = collapseError(tidy);
 	return /* @__PURE__ */ jsxs("box", {
+		style: { flexDirection: "column" },
+		children: [lines.map((line, idx) => /* @__PURE__ */ jsx("text", {
+			fg: theme.error,
+			style: { wrapMode: "word" },
+			children: line
+		}, idx)), clipped && /* @__PURE__ */ jsx("text", {
+			fg: theme.error,
+			children: hidden > 0 ? `… +${hidden} more lines · click to expand` : "… click to expand"
+		})]
+	});
+}
+/** Indents tool output two columns under its header — no rule, just space. */
+function Indented({ children }) {
+	return /* @__PURE__ */ jsx("box", {
 		style: {
-			flexDirection: "row",
-			paddingLeft: 1,
-			paddingRight: 1,
-			height: 1,
-			backgroundColor: theme.surface ?? "#1a1a1a"
+			flexDirection: "column",
+			paddingLeft: 2
 		},
-		children: [
-			/* @__PURE__ */ jsx("text", {
-				fg: theme.accent,
-				children: left
-			}),
-			/* @__PURE__ */ jsx("box", {
-				style: { flexGrow: 1 },
-				children: /* @__PURE__ */ jsxs("text", {
-					fg: theme.muted,
-					children: [" ", middle]
-				})
-			}),
-			share ? /* @__PURE__ */ jsxs("text", {
-				fg: share.color,
-				children: [share.text, " "]
-			}) : null,
-			rightHint ? /* @__PURE__ */ jsx("text", {
-				fg: theme.muted,
-				children: rightHint
-			}) : null
-		]
+		children
 	});
 }
+
+//#endregion
+//#region src/chat/tui/status-bar-label.ts
 /**
-* The share indicator, which answers exactly one question: can the agent on
-* screen run commands on this machine right now? Not "is the portal
-* connected" — the connection is a per-machine fact, access is per agent, and
-* a badge that tracks the former tells a user who just declined that the agent
-* is in.
+* The portal indicator: a standing answer to "can the agent on screen run
+* commands on my machine right now, and if not, what is in the way?"
 *
-* So it is scoped to the current agent and shown only once that agent holds a
-* grant. Everything else — no agent on screen, portal off, connected but this
-* agent ungranted, still connecting — renders as the off state (nothing), which
-* is the truthful reading: this agent cannot reach the machine.
+* Two independent facts decide that, and collapsing them is the trap. The
+* connection is per MACHINE (the daemon is dialed or it isn't); the grant is
+* per AGENT (this agent is allowed or it isn't). A badge that tracked only the
+* connection would show green to someone who had just declined. So it reports
+* the agent-scoped answer wherever a screen names an agent, and the
+* machine-level fact on the screens that don't (the pickers), where no grant
+* is in question.
 *
-* The one exception is an error, and only for an agent that IS granted: its
-* access is supposed to be live and isn't, which the user needs to see.
-*/
-function portalIndicator(portal, agentId) {
-	if (!agentId || !portal.grantedAgentIds.includes(agentId)) return null;
+* It always renders something. Silence used to stand for five different
+* situations at once — unavailable, off, still connecting, connected but this
+* agent ungranted, or no agent on screen — which is exactly when a user needs
+* to be told which one they are in.
+*/
+function portalIndicator({ portal, agentId, available }) {
+	if (!available) return {
+		text: "○ portal unavailable",
+		color: theme.muted
+	};
 	switch (portal.status) {
-		case "off":
-		case "connecting": return null;
-		case "connected": return {
-			text: "● machine connected",
-			color: theme.success
+		case "off": return {
+			text: "○ portal off",
+			color: theme.muted
+		};
+		case "connecting": return {
+			text: "○ portal connecting",
+			color: theme.muted
 		};
 		case "error": return {
-			text: "● machine error",
+			text: "● portal error",
 			color: theme.error
 		};
+		case "connected": return agentId && portal.grantedAgentIds.includes(agentId) ? {
+			text: "● portal shared",
+			color: theme.success
+		} : {
+			text: "○ portal on",
+			color: theme.muted
+		};
 	}
 }
+/**
+* Clip the screen label to whatever the fixed parts leave, so the bar degrades
+* by shortening the one piece that has somewhere else to be (the conversation
+* title is also the terminal's own title) rather than by chopping a word off
+* the portal badge. Below a few columns the label is dropped outright: a lone
+* ellipsis is noise, and the badge and hint still have to read.
+*/
+function fitMiddle({ label, width, fixed }) {
+	const budget = width - fixed - 5;
+	if (budget < 4) return "";
+	return truncate(label, budget);
+}
 /** The agent whose access the indicator speaks for, if a screen names one. */
 function screenAgentId(screen) {
 	return screen.kind === "chat" || screen.kind === "conversation-picker" ? screen.agent.id : null;
@@ -1696,6 +1842,67 @@ function isNewConv(c) {
 	return "kind" in c && c.kind === "new";
 }
 
+//#endregion
+//#region src/chat/tui/status-bar.tsx
+/**
+* Top-of-screen status line. Mirrors what's in the title of most
+* editor TUIs: who you are, where you're connected, what you're
+* looking at.
+*/
+function StatusBar({ rightHint }) {
+	const appUrl = useStore((s) => s.appUrl);
+	const workspaceName = useStore((s) => s.workspaceName);
+	const screen = useStore((s) => s.screen);
+	const chatTitle = useStore((s) => s.chatTitle);
+	const portal = useStore((s) => s.portal);
+	const authKind = useStore((s) => s.authKind);
+	const { width } = useTerminalDimensions();
+	const left = headerLeftLabel(appUrl, workspaceName);
+	const badge = portalIndicator({
+		portal,
+		agentId: screenAgentId(screen),
+		available: authKind === "session"
+	});
+	const middle = fitMiddle({
+		label: screenLabel(screen, chatTitle),
+		width,
+		fixed: left.length + badge.text.length + (rightHint?.length ?? 0)
+	});
+	return /* @__PURE__ */ jsxs("box", {
+		style: {
+			flexDirection: "row",
+			paddingLeft: 1,
+			paddingRight: 1,
+			height: 1,
+			backgroundColor: theme.surface ?? "#1a1a1a"
+		},
+		children: [
+			/* @__PURE__ */ jsx("text", {
+				fg: theme.accent,
+				children: left
+			}),
+			/* @__PURE__ */ jsx("box", {
+				style: {
+					flexGrow: 1,
+					flexShrink: 1
+				},
+				children: /* @__PURE__ */ jsxs("text", {
+					fg: theme.muted,
+					children: [" ", middle]
+				})
+			}),
+			/* @__PURE__ */ jsxs("text", {
+				fg: badge.color,
+				children: [badge.text, " "]
+			}),
+			rightHint ? /* @__PURE__ */ jsx("text", {
+				fg: theme.muted,
+				children: rightHint
+			}) : null
+		]
+	});
+}
+
 //#endregion
 //#region src/chat/tui/list-window.ts
 /** Keeps the highlighted row inside the visible window as the user moves. */
@@ -2716,171 +2923,6 @@ function WorkspacePicker({ appUrl, sessionToken, onSelect, onCancel }) {
 	});
 }
 
-//#endregion
-//#region src/chat/tui/chunks/frame.tsx
-/** Status glyph + color for a tool's lifecycle state. */
-function toolGlyph(state) {
-	switch (state) {
-		case "streaming":
-		case "input-ready": return {
-			ch: "◐",
-			color: theme.warning
-		};
-		case "output-ready": return {
-			ch: "✓",
-			color: theme.success
-		};
-		case "error": return {
-			ch: "✗",
-			color: theme.error
-		};
-	}
-}
-/** Truncate a single line with an ellipsis. */
-function truncate(line, maxLen) {
-	return line.length > maxLen ? `${line.slice(0, maxLen - 1)}…` : line;
-}
-/**
-* Compact a block of tool output for the transcript: truncate over-long
-* lines (so a giant single-line JSON blob doesn't wrap to a wall) and cap
-* the line count, with a "+N more" tail that doubles as the click-to-expand
-* affordance. Expanded blocks render through `ExpandedLines` instead —
-* full content, word-wrapped, nothing clipped.
-*/
-function clipLines(text, { maxLines, maxLineLen }) {
-	const lines = text.replace(/\t/g, "  ").split("\n");
-	const out = lines.slice(0, maxLines).map((line) => truncate(line, maxLineLen));
-	if (lines.length > maxLines) out.push(`… +${lines.length - maxLines} more lines · click to expand`);
-	return out;
-}
-/**
-* Split a block for the expanded view: tabs normalised, no line cap, no
-* per-line truncation — rendering word-wraps instead. Blank lines become a
-* single space so they keep their row (an empty <text> collapses).
-*/
-function expandLines(text) {
-	return text.replace(/\t/g, "  ").split("\n").map((line) => line.length === 0 ? " " : line);
-}
-/**
-* Full, untruncated block content for an expanded view: every line kept and
-* word-wrapped by the terminal instead of ellipsis-clipped.
-*/
-function ExpandedLines({ text, fg }) {
-	return /* @__PURE__ */ jsx("box", {
-		style: { flexDirection: "column" },
-		children: expandLines(text).map((line, idx) => /* @__PURE__ */ jsx("text", {
-			fg,
-			style: { wrapMode: "word" },
-			children: line
-		}, idx))
-	});
-}
-/** Whether a block of text has lines hidden by the collapsed line cap. */
-function isClipped(text, maxLines) {
-	let count = 1;
-	for (let i = 0; i < text.length; i++) {
-		if (text.charCodeAt(i) === 10) count++;
-		if (count > maxLines) return true;
-	}
-	return false;
-}
-/** Dim tail line under an expanded block: click anywhere on it to fold. */
-function CollapseHint() {
-	return /* @__PURE__ */ jsx("text", {
-		fg: theme.dim,
-		children: "· click to collapse"
-	});
-}
-/** Collapsed line cap for tool error output. */
-const maxErrorLines = 8;
-/**
-* Character budget for a collapsed error block, sized so the block still
-* costs about `maxErrorLines` rows on a conventional 80-column terminal.
-* Error lines wrap instead of clipping, so without this a single
-* multi-kilobyte line (a raw JSON body, a minified stack) would wrap into a
-* wall of scrollback.
-*/
-const maxErrorChars = maxErrorLines * 80;
-/**
-* Squeeze the vertical dead space out of a block: leading and trailing blank
-* lines dropped, runs of blank lines collapsed to one. A failing command's
-* error text arrives as stderr (newline-terminated) plus a blank-line-
-* separated `Command exited with code N`, which otherwise renders as a
-* two-row hole in the middle of the block.
-*/
-function tightenBlanks(text) {
-	return text.replace(/\n{3,}/g, "\n\n").replace(/^\n+/, "").replace(/\s+$/, "");
-}
-/**
-* Collapsed form of an error block: whole lines, up to the line cap and the
-* character budget, left for the renderer to word-wrap. Unlike ok output,
-* errors are not clipped at a fixed column — the reason a command failed is
-* usually in the tail of the message, so an ellipsis at column 100 hides the
-* one thing the block exists to say.
-*/
-function collapseError(text) {
-	const source = expandLines(text);
-	const lines = [];
-	let room = maxErrorChars;
-	let cut = false;
-	for (const line of source) {
-		if (lines.length === maxErrorLines || room <= 0) break;
-		if (line.length > room) {
-			lines.push(truncate(line, room));
-			cut = true;
-			break;
-		}
-		lines.push(line);
-		room -= line.length;
-	}
-	const hidden = source.length - lines.length;
-	return {
-		lines,
-		hidden,
-		clipped: cut || hidden > 0
-	};
-}
-/** Whether a collapsed error block hides any of its text. */
-function isErrorClipped(text) {
-	return collapseError(tightenBlanks(text)).clipped;
-}
-/**
-* Tool error output, clamped like ok output: collapsed it clips to
-* `maxErrorLines` with the "+N more · click to expand" tail; expanded it
-* renders in full. Same click-to-toggle box as the rest of the block — a
-* failing command's output shouldn't flood the scrollback just because it
-* arrived on the error channel.
-*/
-function ErrorLines({ text, expanded }) {
-	const tidy = tightenBlanks(text);
-	if (expanded) return /* @__PURE__ */ jsx(ExpandedLines, {
-		text: tidy,
-		fg: theme.error
-	});
-	const { lines, hidden, clipped } = collapseError(tidy);
-	return /* @__PURE__ */ jsxs("box", {
-		style: { flexDirection: "column" },
-		children: [lines.map((line, idx) => /* @__PURE__ */ jsx("text", {
-			fg: theme.error,
-			style: { wrapMode: "word" },
-			children: line
-		}, idx)), clipped && /* @__PURE__ */ jsx("text", {
-			fg: theme.error,
-			children: hidden > 0 ? `… +${hidden} more lines · click to expand` : "… click to expand"
-		})]
-	});
-}
-/** Indents tool output two columns under its header — no rule, just space. */
-function Indented({ children }) {
-	return /* @__PURE__ */ jsx("box", {
-		style: {
-			flexDirection: "column",
-			paddingLeft: 2
-		},
-		children
-	});
-}
-
 //#endregion
 //#region src/chat/tui/list-line.ts
 /**
@@ -7281,13 +7323,14 @@ function useCompaction({ rest, conversationId }) {
 //#endregion
 //#region src/chat/tui/chat/footer-hints.ts
 /** Build the chat footer copy independently of its colors and layout. */
-function formatChatFooterStatus({ runKind, ctrlCArmed, isShared, hasPendingSteer, actionableCardCount, nonWebChannel }) {
+function formatChatFooterStatus({ runKind, ctrlCArmed, portalOpen, hasPendingSteer, actionableCardCount, nonWebChannel }) {
+	const portalHint = `ctrl+t ${portalOpen ? "close portal" : "portal"}`;
 	const connectHint = actionableCardCount > 1 ? `ctrl+r connect (${actionableCardCount}) · ` : actionableCardCount === 1 ? "ctrl+r connect · " : "";
 	switch (runKind) {
 		case "idle":
 			if (ctrlCArmed) return "press ctrl+c again to quit";
-			if (nonWebChannel) return `esc back · ctrl+c quit · ctrl+t ${isShared ? "revoke access" : "local access"} · ? keybinds`;
-			return `${connectHint}↵  send · / commands · esc back · ctrl+c quit · ctrl+t ${isShared ? "revoke access" : "local access"} · ? keybinds`;
+			if (nonWebChannel) return `esc back · ctrl+c quit · ${portalHint} · ? keybinds`;
+			return `${connectHint}↵  send · / commands · esc back · ctrl+c quit · ${portalHint} · ? keybinds`;
 		case "sending": return "sending…";
 		case "streaming": return hasPendingSteer ? `${connectHint}↵ steer · esc cancel steer · ctrl+c cancel run` : `${connectHint}↵ steer · esc leave (keeps running) · ctrl+c cancel`;
 	}
@@ -7309,7 +7352,7 @@ function formatModelHint(model, effort) {
 * bar and footer can't fit, one aligned `label  value` row each. Pure so the
 * layout is testable without a renderer.
 */
-function formatStatusInfo({ appUrl, workspaceName, agentName, conversationId, model, effort, share }) {
+function formatStatusInfo({ appUrl, workspaceName, agentName, conversationId, model, effort, portal }) {
 	const rows = [
 		["app", appUrl ?? "unknown"],
 		["workspace", workspaceName ?? "unknown"],
@@ -7318,14 +7361,20 @@ function formatStatusInfo({ appUrl, workspaceName, agentName, conversationId, mo
 		["model", model ?? "default"]
 	];
 	if (effort) rows.push(["effort", effort]);
-	rows.push(["local access", formatShare(share)]);
+	rows.push(["portal", formatPortal(portal)]);
 	const width = Math.max(...rows.map(([label]) => label.length));
 	return rows.map(([label, value]) => `${label.padEnd(width)}  ${value}`).join("\n");
 }
-function formatShare(share) {
-	if (share.status === "off") return "off (ctrl+t to share this machine)";
-	if (share.status !== "connected") return share.status;
-	return share.grantedToAgent ? "shared (this agent can run commands here)" : "shared (this agent is not granted)";
+/**
+* Spell out both halves of the portal's state, because "can this agent reach
+* my machine" is the conjunction of a per-machine connection and a per-agent
+* grant — and connected-but-ungranted is exactly the case a one-word status
+* loses.
+*/
+function formatPortal(portal) {
+	if (portal.status === "off") return "off (ctrl+t to open it)";
+	if (portal.status !== "connected") return portal.status;
+	return portal.grantedToAgent ? "shared (this agent can run commands on this machine)" : "on (this agent is not granted)";
 }
 
 //#endregion
@@ -7760,7 +7809,7 @@ const keybindGroups = [
 			},
 			{
 				keys: "ctrl+t",
-				action: "local access: grant / revoke this machine"
+				action: "open / close the portal on this machine"
 			},
 			{
 				keys: "ctrl+l",
@@ -8013,7 +8062,7 @@ const keybindGroups = [
 		}]
 	},
 	{
-		title: "local access prompt",
+		title: "portal prompt",
 		binds: [{
 			keys: "y",
 			action: "allow the agent to run commands"
@@ -8330,7 +8379,7 @@ const slashCommands = [
 		name: "share",
 		aliases: [],
 		argsHint: null,
-		description: "local access: grant / revoke this machine",
+		description: "open / close the portal on this machine",
 		action: { kind: "share" }
 	},
 	{
@@ -8358,7 +8407,7 @@ const slashCommands = [
 		name: "portal",
 		aliases: ["local"],
 		argsHint: null,
-		description: "allow this agent to access your computer",
+		description: "give this agent access to your machine over the portal",
 		action: { kind: "portal" }
 	},
 	{
@@ -12226,7 +12275,7 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 	const declinedRef = useRef(/* @__PURE__ */ new Set());
 	const grantInFlightRef = useRef(/* @__PURE__ */ new Set());
 	const grantPrompt = portal.prompt && portal.prompt.agentId === agent.id ? portal.prompt : null;
-	const isShared = portal.status !== "off";
+	const portalOpen = portal.status !== "off";
 	const initialConversationId = isNewConversation(conversation) ? null : conversation.id;
 	const agentHost = useAgentHost();
 	const nonWebChannel = nonWebChannelLabel(conversation);
@@ -13537,7 +13586,7 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 	]);
 	const toggleShare = useCallback(() => {
 		if (!portalClient) {
-			useStore.getState().showToast({ message: useStore.getState().authKind === "api-key" ? "local access needs a browser session; run `skydive auth login --web`" : "local access is unavailable in this session" });
+			useStore.getState().showToast({ message: useStore.getState().authKind === "api-key" ? "the portal needs a browser session; run `skydive auth login --web`" : "the portal is unavailable in this session" });
 			return;
 		}
 		if (portal.status === "off") {
@@ -13591,7 +13640,7 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 	]);
 	const openPortalAccess = useCallback(() => {
 		if (!portalClient) {
-			useStore.getState().showToast({ message: useStore.getState().authKind === "api-key" ? "local access needs a browser session; run `skydive auth login --web`" : "local access is unavailable in this session" });
+			useStore.getState().showToast({ message: useStore.getState().authKind === "api-key" ? "the portal needs a browser session; run `skydive auth login --web`" : "the portal is unavailable in this session" });
 			return;
 		}
 		switch (portal.status) {
@@ -13599,10 +13648,10 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 				declinedRef.current.delete(agent.id);
 				portalClient.decline(agent.id, false);
 				portalClient.enable();
-				useStore.getState().showToast({ message: "enabling local access on this machine…" });
+				useStore.getState().showToast({ message: "opening the portal to this machine…" });
 				break;
 			case "connecting":
-				useStore.getState().showToast({ message: "local access is still connecting…" });
+				useStore.getState().showToast({ message: "the portal is still connecting…" });
 				break;
 			case "connected":
 				if (portal.grantedAgentIds.includes(agent.id)) {
@@ -13617,7 +13666,7 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 				});
 				break;
 			case "error":
-				useStore.getState().showToast({ message: portal.error ? `local access error: ${portal.error}` : "local access hit an error" });
+				useStore.getState().showToast({ message: portal.error ? `portal error: ${portal.error}` : "the portal hit an error" });
 				break;
 			default: {
 				const exhaustive = portal.status;
@@ -13730,7 +13779,7 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 							conversationId,
 							model,
 							effort,
-							share: {
+							portal: {
 								status: portal.status,
 								grantedToAgent: portal.grantedAgentIds.includes(agent.id)
 							}
@@ -14125,14 +14174,14 @@ function ChatScreen({ agent, conversation, attachRunId }) {
 	const statusText = useMemo(() => formatChatFooterStatus({
 		runKind: run.kind,
 		ctrlCArmed,
-		isShared,
+		portalOpen,
 		hasPendingSteer,
 		actionableCardCount: actionableCards.length,
 		nonWebChannel: nonWebChannel !== null
 	}), [
 		run.kind,
 		ctrlCArmed,
-		isShared,
+		portalOpen,
 		hasPendingSteer,
 		actionableCards.length,
 		nonWebChannel