skydive-cli 0.6.0-beta.34 → 0.6.0-beta.36

package/dist/js/client-CM--T5Fy.mjs

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import { t as PortalClient } from "./client-DCrQwQV7.mjs";
+import "./api-BFQ4PQDA.mjs";
+
+export { PortalClient };

package/dist/js/{client-BKr7GJE0.mjs → client-DCrQwQV7.mjs}

@@ -160,7 +160,7 @@ function errorMessage(err) {
 * the commit time of the built tree is one monotonic clock they share.
 */
 function portalDaemonBuild() {
-	return "1790279396";
+	return "1790359164";
 }
 /**
 * Whether a client carrying `mine` should replace a running daemon carrying

package/dist/js/{daemon-BXvcpx95.mjs → daemon-BxY38n5R.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import "./client-BKr7GJE0.mjs";
+import "./client-DCrQwQV7.mjs";
 import "./tls-cert-Rua2oV7n.mjs";
 import "./api-BFQ4PQDA.mjs";
-import { a as runPortalDaemon, c as stopDaemonForHandoff, i as queryDaemonStatus, n as ensureDaemonRunning, o as startPortalDaemon, r as isDaemonListening, s as stopDaemon, t as PortalDaemon } from "./daemon-DZqfbEqh.mjs";
+import { a as runPortalDaemon, c as stopDaemonForHandoff, i as queryDaemonStatus, n as ensureDaemonRunning, o as startPortalDaemon, r as isDaemonListening, s as stopDaemon, t as PortalDaemon } from "./daemon-CXnHsea6.mjs";
 
 export { runPortalDaemon };

package/dist/js/{daemon-DZqfbEqh.mjs → daemon-CXnHsea6.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { i as isRecord, n as isNewerBuild, r as portalDaemonBuild, t as PortalClient } from "./client-BKr7GJE0.mjs";
+import { i as isRecord, n as isNewerBuild, r as portalDaemonBuild, t as PortalClient } from "./client-DCrQwQV7.mjs";
 import { t as defaultTlsCertSource } from "./tls-cert-Rua2oV7n.mjs";
 import os from "node:os";
 import path from "node:path";
@@ -66,6 +66,18 @@ function canonicalPortalAppUrl(appUrl) {
 	if (host === "skydive.com" || host === "www.skydive.com" || host === "api.skydive.com") return "https://api.skydive.com";
 	return trimmed;
 }
+/** Prefix every Windows named pipe lives under (the pipe filesystem root). */
+const WINDOWS_PIPE_PREFIX = "\\\\.\\pipe\\";
+/**
+* Whether a daemon control-socket path is a Windows named pipe rather than a
+* Unix-domain-socket FILE. Pipes have no on-disk file: they cannot be
+* `stat`ed, `unlink`ed, or purged by a tmp cleaner, and the OS frees the name
+* the moment the owning server closes — so every file-based lifecycle step
+* (stale-file cleanup, the socket-ownership watch) must be skipped for them.
+*/
+function isNamedPipePath(socketPath) {
+	return socketPath.startsWith(WINDOWS_PIPE_PREFIX);
+}
 /**
 * Per-user, per-app daemon socket + state paths. Scoped by OS user and a hash
 * of the CANONICAL appUrl so two logins or two deployments (prod vs a PR
@@ -74,6 +86,12 @@ function canonicalPortalAppUrl(appUrl) {
 * one. Kept under the OS temp dir because Unix socket paths are
 * length-limited (~104 bytes on macOS).
 *
+* On Windows a `node:net` server cannot listen on a filesystem path at all —
+* binding the tmp-dir path fails with EACCES and the daemon dies silently
+* (ANY-7285's Windows facet) — so the socket is a named pipe under
+* `\\.\pipe\`, keyed by the same (user, appUrl-hash) pair. State and log
+* files stay under the temp dir on every platform.
+*
 * Darwin `sockaddr_un.sun_path` is 104 bytes including NUL (103 usable).
 * `os.tmpdir()` on macOS is `$TMPDIR` (`/var/folders/<id>/T`, often ~50
 * chars). Adding `skydive-portal-<user>-<hash>/daemon.sock` overruns that
@@ -84,18 +102,17 @@ function canonicalPortalAppUrl(appUrl) {
 * sun_path, so they keep the long leaf.
 */
 const SUN_PATH_MAX = 103;
-function daemonPaths(appUrl) {
+function daemonPaths(appUrl, platform = process.platform) {
 	const parent = os.tmpdir();
-	const user = safeSegment(os.userInfo().username || "user");
-	const app = createHash("sha256").update(canonicalPortalAppUrl(appUrl)).digest("hex").slice(0, 12);
-	const dir = path.join(parent, `skydive-portal-${user}-${app}`);
+	const key = `skydive-portal-${safeSegment(os.userInfo().username || "user")}-${createHash("sha256").update(canonicalPortalAppUrl(appUrl)).digest("hex").slice(0, 12)}`;
+	const dir = path.join(parent, key);
 	const paths = {
 		dir,
-		socketPath: path.join(dir, "daemon.sock"),
+		socketPath: platform === "win32" ? `${WINDOWS_PIPE_PREFIX}${key}` : path.join(dir, "daemon.sock"),
 		statePath: path.join(dir, "state.json"),
 		logPath: path.join(dir, "daemon.log")
 	};
-	if (process.platform === "win32" || Buffer.byteLength(paths.socketPath) <= SUN_PATH_MAX) return paths;
+	if (platform === "win32" || Buffer.byteLength(paths.socketPath) <= SUN_PATH_MAX) return paths;
 	const short = createHash("sha256").update(`${os.userInfo().username || "user"}\0${canonicalPortalAppUrl(appUrl)}`).digest("hex").slice(0, 12);
 	const shortDir = path.join(parent, `skydive-p-${short}`);
 	return {
@@ -412,8 +429,10 @@ var PortalDaemon = class {
 				resolve();
 			});
 		});
-		await this.recordSocketIdentity();
-		this.startSocketWatch();
+		if (!isNamedPipePath(this.paths.socketPath)) {
+			await this.recordSocketIdentity();
+			this.startSocketWatch();
+		}
 	}
 	/**
 	* Remember which socket FILE we bound (dev+ino), so the watch can tell "our
@@ -510,6 +529,10 @@ var PortalDaemon = class {
 		this.exit();
 	}
 	async clearStaleSocket() {
+		if (isNamedPipePath(this.paths.socketPath)) {
+			if (await isDaemonListening(this.paths.socketPath)) throw new Error("daemon already running");
+			return;
+		}
 		if (!await pathExists(this.paths.socketPath)) return;
 		if (await new Promise((resolve) => {
 			const probe = connect(this.paths.socketPath);
@@ -806,13 +829,19 @@ var PortalDaemon = class {
 * drains attached clients, who reconnect within ~500ms) and spawn from this
 * binary. Both spawners apply the same rule, so a host converges on the
 * newest installed build with at most one bounce.
+*
+* Returns whether a daemon is actually listening when it's done. A spawned
+* daemon that never binds (its process died on startup — e.g. the Windows
+* EACCES bind failure this used to swallow) resolves `false` so callers can
+* SAY so, instead of silently handing the caller a socket nobody serves and
+* leaving the reconnect loop to spin forever with no visible error.
 */
 async function ensureDaemonRunning(appUrl) {
 	const { socketPath } = daemonPaths(appUrl);
 	if (await isDaemonListening(socketPath)) {
 		const status = await queryDaemonStatus(appUrl);
-		if (!status || !isNewerBuild(portalDaemonBuild(), status.build)) return;
-		if (await stopDaemonForHandoff(appUrl) === "failed") return;
+		if (!status || !isNewerBuild(portalDaemonBuild(), status.build)) return true;
+		if (await stopDaemonForHandoff(appUrl) === "failed") return true;
 	}
 	const entry = process.argv[1];
 	const args = entry ? [
@@ -826,9 +855,10 @@ async function ensureDaemonRunning(appUrl) {
 		env: process.env
 	}).unref();
 	for (let i = 0; i < 50; i += 1) {
-		if (await isDaemonListening(socketPath)) return;
+		if (await isDaemonListening(socketPath)) return true;
 		await sleep(100);
 	}
+	return false;
 }
 /**
 * Entry the CLI calls when launched with PORTAL_DAEMON_FLAG: become the daemon.
@@ -849,7 +879,7 @@ function startPortalDaemon(appUrl) {
 	return new PortalDaemon(appUrl, null).listen();
 }
 async function isDaemonListening(socketPath) {
-	if (!await pathExists(socketPath)) return false;
+	if (!isNamedPipePath(socketPath) && !await pathExists(socketPath)) return false;
 	return new Promise((resolve) => {
 		const probe = connect(socketPath);
 		probe.on("connect", () => {

package/dist/js/daemon-client-gA9ZrOBm.mjs

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import "./client-DCrQwQV7.mjs";
+import "./tls-cert-Rua2oV7n.mjs";
+import "./api-BFQ4PQDA.mjs";
+import "./daemon-CXnHsea6.mjs";
+import { t as PortalDaemonClient } from "./daemon-client-n5zNHAld.mjs";
+
+export { PortalDaemonClient };

package/dist/js/{daemon-client-pcfcfzGs.mjs → daemon-client-n5zNHAld.mjs}

@@ -1,14 +1,21 @@
 #!/usr/bin/env node
-import { d as daemonPaths, f as encodeLine, l as LOCAL_PROTOCOL_VERSION, m as parseDaemonMessage, n as ensureDaemonRunning, p as makeLineParser } from "./daemon-DZqfbEqh.mjs";
+import { d as daemonPaths, f as encodeLine, l as LOCAL_PROTOCOL_VERSION, m as parseDaemonMessage, n as ensureDaemonRunning, p as makeLineParser } from "./daemon-CXnHsea6.mjs";
 import { randomUUID } from "node:crypto";
 import { connect } from "node:net";
 
 //#region ../portal-daemon/src/daemon-client.ts
+/** Reconnect delay when an established daemon connection drops. */
+const RECONNECT_DELAY_MS = 500;
+/** Base delay between daemon SPAWN retries (doubles per consecutive failure). */
+const START_RETRY_BASE_MS = 2e3;
+/** Consecutive failed spawns before start() stops respawning. */
+const MAX_START_ATTEMPTS = 3;
 var PortalDaemonClient = class {
 	sessionId = randomUUID();
 	socket = null;
 	disposed = false;
 	reconnectTimer = null;
+	startFailures = 0;
 	lastBind = null;
 	fallbackCwd = null;
 	wantEnabled = false;
@@ -21,7 +28,21 @@ var PortalDaemonClient = class {
 	/** Spawn the daemon if needed and attach. Idempotent. */
 	async start() {
 		if (this.disposed) return;
-		await ensureDaemonRunning(this.opts.appUrl);
+		if (!await ensureDaemonRunning(this.opts.appUrl)) {
+			this.startFailures += 1;
+			const exhausted = this.startFailures >= MAX_START_ATTEMPTS;
+			this.opts.onState({
+				status: "error",
+				machineName: "",
+				friendlyName: "",
+				error: exhausted ? "portal daemon failed to start repeatedly; toggle sharing to retry" : "portal daemon failed to start (control socket never came up)",
+				grantedAgentIds: [],
+				declinedAgentIds: []
+			});
+			if (!exhausted) this.scheduleReconnect(START_RETRY_BASE_MS * 2 ** (this.startFailures - 1));
+			return;
+		}
+		this.startFailures = 0;
 		this.connect();
 	}
 	connect() {
@@ -74,12 +95,12 @@ var PortalDaemonClient = class {
 		socket.on("close", onClose);
 		socket.on("error", onClose);
 	}
-	scheduleReconnect() {
+	scheduleReconnect(delayMs = RECONNECT_DELAY_MS) {
 		if (this.disposed || this.reconnectTimer) return;
 		this.reconnectTimer = setTimeout(() => {
 			this.reconnectTimer = null;
 			this.start();
-		}, 500);
+		}, delayMs);
 		this.reconnectTimer.unref();
 	}
 	onMessage(msg) {
@@ -109,6 +130,10 @@ var PortalDaemonClient = class {
 	/** Turn machine sharing on (the daemon connects the portal). */
 	enable() {
 		this.wantEnabled = true;
+		if (this.startFailures >= MAX_START_ATTEMPTS) {
+			this.startFailures = 0;
+			this.start();
+		}
 		this.send({ t: "enable" });
 	}
 	/** Turn machine sharing off. */

package/dist/js/{install-DfVDCs_q.mjs → install-DFMGB_wi.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { c as version$1 } from "./rest-M6NtmtbL.mjs";
-import { E as getConfigPath } from "./print-DK-FfPei.mjs";
+import { c as version$1 } from "./rest-CM76e6UD.mjs";
+import { E as getConfigPath } from "./print-BDW65Ro4.mjs";
 import os from "node:os";
 import path from "node:path";
 import { err, ok } from "neverthrow";

package/dist/js/{print-DK-FfPei.mjs → print-BDW65Ro4.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { a as errorMessage, i as sendErrorMessage, o as isRecord, t as createRestClient } from "./rest-M6NtmtbL.mjs";
+import { a as errorMessage, i as sendErrorMessage, o as isRecord, t as createRestClient } from "./rest-CM76e6UD.mjs";
 import { t as HttpError } from "./http-error-BF2NZZE3.mjs";
 import { i as billingBlockedOutcomeFromSendResponse, n as BillingBlockedError } from "./billing-blocked-D3l5kJlX.mjs";
 import path from "node:path";

package/dist/js/{print-TH3V1aOU.mjs → print-Dd5sckl2.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import "./rest-M6NtmtbL.mjs";
-import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-DK-FfPei.mjs";
+import "./rest-CM76e6UD.mjs";
+import { a as runPrint, i as resolveAgent, n as messageGet, o as toPrintError, r as readStdin, t as collectRunText } from "./print-BDW65Ro4.mjs";
 import "./billing-blocked-D3l5kJlX.mjs";
 
 export { messageGet, readStdin, resolveAgent, runPrint };

package/dist/js/{print-share-R6eas8fM.mjs → print-share-BuXkSsGz.mjs}

@@ -14,7 +14,7 @@ import { n as printError } from "./output-C9mb3sUB.mjs";
 * the reply (and to --json).
 */
 async function connectMachineShare({ appUrl, sessionToken, timeoutHint }) {
-	const { PortalClient } = await import("./client-Dcw8Wl3E.mjs");
+	const { PortalClient } = await import("./client-CM--T5Fy.mjs");
 	const { defaultTlsCertSource } = await import("./tls-cert-BpCaD5AT.mjs");
 	let signalConnected;
 	const connected = new Promise((resolve) => {

package/dist/js/{rest-M6NtmtbL.mjs → rest-CM76e6UD.mjs}

@@ -6,7 +6,7 @@ import { createParser } from "eventsource-parser";
 
 //#region package.json
 var name = "skydive-cli";
-var version = "0.6.0-beta.34";
+var version = "0.6.0-beta.36";
 
 //#endregion
 //#region src/chat/util.ts

package/dist/js/{rest-ZHnvQy7G.mjs → rest-Dewe3vqZ.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { i as sendErrorMessage, n as errorDetail, r as filenameFromContentDisposition, t as createRestClient } from "./rest-M6NtmtbL.mjs";
+import { i as sendErrorMessage, n as errorDetail, r as filenameFromContentDisposition, t as createRestClient } from "./rest-CM76e6UD.mjs";
 import { t as HttpError } from "./http-error-BF2NZZE3.mjs";
 import "./billing-blocked-D3l5kJlX.mjs";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skydive-cli",
-  "version": "0.6.0-beta.34",
+  "version": "0.6.0-beta.36",
   "description": "Skydive CLI — cloud agents from the command line",
   "homepage": "https://skydive.com",
   "license": "MIT",
@@ -71,9 +71,9 @@
   },
   "//optionalDependencies": "The per-platform binary packages (skydive-cli-<os>-<arch>) are INTENTIONALLY not committed here. They are published by release-skydive-cli-binaries.yml and injected — pinned to the exact version being published — into the published launcher's optionalDependencies at release time (scripts/prepare-platform-packages.mjs --pin-version, run in release-skydive-cli.yml). Committing them would make `yarn install` try to resolve versions that only exist post-publish, breaking local dev and CI. npm installs of a published skydive-cli still get them (os/cpu-gated); the launcher (src/launcher.ts) resolves and execs the matching one. Local dev never needs them: it runs the JS bundle or `build:binary` directly.",
   "optionalDependencies": {
-    "skydive-cli-darwin-arm64": "0.6.0-beta.34",
-    "skydive-cli-darwin-x64": "0.6.0-beta.34",
-    "skydive-cli-linux-x64": "0.6.0-beta.34",
-    "skydive-cli-linux-arm64": "0.6.0-beta.34"
+    "skydive-cli-darwin-arm64": "0.6.0-beta.36",
+    "skydive-cli-darwin-x64": "0.6.0-beta.36",
+    "skydive-cli-linux-x64": "0.6.0-beta.36",
+    "skydive-cli-linux-arm64": "0.6.0-beta.36"
   }
 }

package/dist/js/client-Dcw8Wl3E.mjs

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-import { t as PortalClient } from "./client-BKr7GJE0.mjs";
-import "./api-BFQ4PQDA.mjs";
-
-export { PortalClient };

package/dist/js/daemon-client-DVPTHNhZ.mjs

@@ -1,8 +0,0 @@
-#!/usr/bin/env node
-import "./client-BKr7GJE0.mjs";
-import "./tls-cert-Rua2oV7n.mjs";
-import "./api-BFQ4PQDA.mjs";
-import "./daemon-DZqfbEqh.mjs";
-import { t as PortalDaemonClient } from "./daemon-client-pcfcfzGs.mjs";
-
-export { PortalDaemonClient };