@boxd-sh/convex 0.1.0

package/dist/component/schema.d.ts

@@ -0,0 +1,138 @@
+/**
+ * A reactive mirror of one boxd machine this component created or forked.
+ *
+ * boxd stays the source of truth: every lifecycle action writes back the
+ * status it observed, and `machines.refresh` re-reads it on demand. The row
+ * outlives the machine (status `"destroyed"`) so its execution history stays
+ * readable.
+ */
+export declare const machineFields: {
+    /** boxd machine id. External, not a Convex document id. */
+    machineId: import("convex/values").VString<string, "required">;
+    name: import("convex/values").VString<string, "required">;
+    /**
+     * Opaque tenant key from the host app. Components can't read `ctx.auth`, so
+     * the app derives this from its own auth and every call must present the
+     * same value to touch the machine.
+     */
+    ownerId: import("convex/values").VString<string | undefined, "optional">;
+    /** Last observed boxd status: `running`, `suspended`, `hibernated`, ... */
+    status: import("convex/values").VString<string, "required">;
+    image: import("convex/values").VString<string | undefined, "optional">;
+    /** `https://<name>.<zone>`, the machine's default HTTPS route. */
+    url: import("convex/values").VString<string | undefined, "optional">;
+    vcpu: import("convex/values").VFloat64<number | undefined, "optional">;
+    memoryBytes: import("convex/values").VFloat64<number | undefined, "optional">;
+    /** Set when this machine is a fork of another machine. */
+    forkedFrom: import("convex/values").VString<string | undefined, "optional">;
+    /** The last failed operation's message. Cleared by the next success. */
+    lastError: import("convex/values").VString<string | undefined, "optional">;
+    updatedAt: import("convex/values").VFloat64<number, "required">;
+};
+export declare const executionStatus: import("convex/values").VUnion<"running" | "completed" | "failed", [import("convex/values").VLiteral<"running", "required">, import("convex/values").VLiteral<"completed", "required">, import("convex/values").VLiteral<"failed", "required">], "required", never>;
+/** One row per `exec`, so the app can render live status and history. */
+export declare const executionFields: {
+    machineId: import("convex/values").VString<string, "required">;
+    ownerId: import("convex/values").VString<string | undefined, "optional">;
+    /** The command line that ran, truncated for storage. */
+    command: import("convex/values").VString<string, "required">;
+    cwd: import("convex/values").VString<string | undefined, "optional">;
+    status: import("convex/values").VUnion<"running" | "completed" | "failed", [import("convex/values").VLiteral<"running", "required">, import("convex/values").VLiteral<"completed", "required">, import("convex/values").VLiteral<"failed", "required">], "required", never>;
+    exitCode: import("convex/values").VFloat64<number | undefined, "optional">;
+    /** Truncated for storage; the action's return value carries more. */
+    stdout: import("convex/values").VString<string | undefined, "optional">;
+    stderr: import("convex/values").VString<string | undefined, "optional">;
+    error: import("convex/values").VString<string | undefined, "optional">;
+    startedAt: import("convex/values").VFloat64<number, "required">;
+    finishedAt: import("convex/values").VFloat64<number | undefined, "optional">;
+};
+declare const _default: import("convex/server").SchemaDefinition<{
+    machines: import("convex/server").TableDefinition<import("convex/values").VObject<{
+        ownerId?: string | undefined;
+        image?: string | undefined;
+        vcpu?: number | undefined;
+        url?: string | undefined;
+        memoryBytes?: number | undefined;
+        forkedFrom?: string | undefined;
+        lastError?: string | undefined;
+        machineId: string;
+        name: string;
+        status: string;
+        updatedAt: number;
+    }, {
+        /** boxd machine id. External, not a Convex document id. */
+        machineId: import("convex/values").VString<string, "required">;
+        name: import("convex/values").VString<string, "required">;
+        /**
+         * Opaque tenant key from the host app. Components can't read `ctx.auth`, so
+         * the app derives this from its own auth and every call must present the
+         * same value to touch the machine.
+         */
+        ownerId: import("convex/values").VString<string | undefined, "optional">;
+        /** Last observed boxd status: `running`, `suspended`, `hibernated`, ... */
+        status: import("convex/values").VString<string, "required">;
+        image: import("convex/values").VString<string | undefined, "optional">;
+        /** `https://<name>.<zone>`, the machine's default HTTPS route. */
+        url: import("convex/values").VString<string | undefined, "optional">;
+        vcpu: import("convex/values").VFloat64<number | undefined, "optional">;
+        memoryBytes: import("convex/values").VFloat64<number | undefined, "optional">;
+        /** Set when this machine is a fork of another machine. */
+        forkedFrom: import("convex/values").VString<string | undefined, "optional">;
+        /** The last failed operation's message. Cleared by the next success. */
+        lastError: import("convex/values").VString<string | undefined, "optional">;
+        updatedAt: import("convex/values").VFloat64<number, "required">;
+    }, "required", "machineId" | "ownerId" | "image" | "name" | "vcpu" | "status" | "url" | "memoryBytes" | "forkedFrom" | "lastError" | "updatedAt">, {
+        by_machine_id: ["machineId", "_creationTime"];
+        by_owner: ["ownerId", "_creationTime"];
+    }, {}, {}>;
+    executions: import("convex/server").TableDefinition<import("convex/values").VObject<{
+        cwd?: string | undefined;
+        ownerId?: string | undefined;
+        exitCode?: number | undefined;
+        stdout?: string | undefined;
+        stderr?: string | undefined;
+        error?: string | undefined;
+        finishedAt?: number | undefined;
+        command: string;
+        machineId: string;
+        status: "running" | "completed" | "failed";
+        startedAt: number;
+    }, {
+        machineId: import("convex/values").VString<string, "required">;
+        ownerId: import("convex/values").VString<string | undefined, "optional">;
+        /** The command line that ran, truncated for storage. */
+        command: import("convex/values").VString<string, "required">;
+        cwd: import("convex/values").VString<string | undefined, "optional">;
+        status: import("convex/values").VUnion<"running" | "completed" | "failed", [import("convex/values").VLiteral<"running", "required">, import("convex/values").VLiteral<"completed", "required">, import("convex/values").VLiteral<"failed", "required">], "required", never>;
+        exitCode: import("convex/values").VFloat64<number | undefined, "optional">;
+        /** Truncated for storage; the action's return value carries more. */
+        stdout: import("convex/values").VString<string | undefined, "optional">;
+        stderr: import("convex/values").VString<string | undefined, "optional">;
+        error: import("convex/values").VString<string | undefined, "optional">;
+        startedAt: import("convex/values").VFloat64<number, "required">;
+        finishedAt: import("convex/values").VFloat64<number | undefined, "optional">;
+    }, "required", "command" | "cwd" | "machineId" | "ownerId" | "status" | "exitCode" | "stdout" | "stderr" | "error" | "startedAt" | "finishedAt">, {
+        by_machine: ["machineId", "_creationTime"];
+    }, {}, {}>;
+    /**
+     * Cached session tokens, keyed by a SHA-256 of the API key and endpoint.
+     * boxd rate-limits the key-for-token exchange per source IP, and every
+     * Convex deployment in a region shares a few egress IPs, so each action
+     * must reuse the token rather than exchange the key again. Internal only:
+     * nothing in the component's public API returns these rows.
+     */
+    sessions: import("convex/server").TableDefinition<import("convex/values").VObject<{
+        keyHash: string;
+        token: string;
+        expiresAt: number;
+    }, {
+        keyHash: import("convex/values").VString<string, "required">;
+        token: import("convex/values").VString<string, "required">;
+        /** Epoch milliseconds. */
+        expiresAt: import("convex/values").VFloat64<number, "required">;
+    }, "required", "keyHash" | "token" | "expiresAt">, {
+        by_key_hash: ["keyHash", "_creationTime"];
+    }, {}, {}>;
+}, true>;
+export default _default;
+//# sourceMappingURL=schema.d.ts.map

package/dist/component/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/component/schema.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa;IACxB,2DAA2D;;;IAG3D;;;;OAIG;;IAEH,2EAA2E;;;IAG3E,kEAAkE;;;;IAIlE,0DAA0D;;IAE1D,wEAAwE;;;CAGzE,CAAC;AAEF,eAAO,MAAM,eAAe,qQAI3B,CAAC;AAEF,yEAAyE;AACzE,eAAO,MAAM,eAAe;;;IAG1B,wDAAwD;;;;;IAKxD,qEAAqE;;;;;;CAMtE,CAAC;;;;;;;;;;;;;;;QA5CA,2DAA2D;;;QAG3D;;;;WAIG;;QAEH,2EAA2E;;;QAG3E,kEAAkE;;;;QAIlE,0DAA0D;;QAE1D,wEAAwE;;;;;;;;;;;;;;;;;;;;;;QAexE,wDAAwD;;;;;QAKxD,qEAAqE;;;;;;;;;IAarE;;;;;;OAMG;;;;;;;;QAID,0BAA0B;;;;;;AAf9B,wBAkBG"}

package/dist/component/schema.js

@@ -0,0 +1,70 @@
+import { defineSchema, defineTable } from "convex/server";
+import { v } from "convex/values";
+/**
+ * A reactive mirror of one boxd machine this component created or forked.
+ *
+ * boxd stays the source of truth: every lifecycle action writes back the
+ * status it observed, and `machines.refresh` re-reads it on demand. The row
+ * outlives the machine (status `"destroyed"`) so its execution history stays
+ * readable.
+ */
+export const machineFields = {
+    /** boxd machine id. External, not a Convex document id. */
+    machineId: v.string(),
+    name: v.string(),
+    /**
+     * Opaque tenant key from the host app. Components can't read `ctx.auth`, so
+     * the app derives this from its own auth and every call must present the
+     * same value to touch the machine.
+     */
+    ownerId: v.optional(v.string()),
+    /** Last observed boxd status: `running`, `suspended`, `hibernated`, ... */
+    status: v.string(),
+    image: v.optional(v.string()),
+    /** `https://<name>.<zone>`, the machine's default HTTPS route. */
+    url: v.optional(v.string()),
+    vcpu: v.optional(v.number()),
+    memoryBytes: v.optional(v.number()),
+    /** Set when this machine is a fork of another machine. */
+    forkedFrom: v.optional(v.string()),
+    /** The last failed operation's message. Cleared by the next success. */
+    lastError: v.optional(v.string()),
+    updatedAt: v.number(),
+};
+export const executionStatus = v.union(v.literal("running"), v.literal("completed"), v.literal("failed"));
+/** One row per `exec`, so the app can render live status and history. */
+export const executionFields = {
+    machineId: v.string(),
+    ownerId: v.optional(v.string()),
+    /** The command line that ran, truncated for storage. */
+    command: v.string(),
+    cwd: v.optional(v.string()),
+    status: executionStatus,
+    exitCode: v.optional(v.number()),
+    /** Truncated for storage; the action's return value carries more. */
+    stdout: v.optional(v.string()),
+    stderr: v.optional(v.string()),
+    error: v.optional(v.string()),
+    startedAt: v.number(),
+    finishedAt: v.optional(v.number()),
+};
+export default defineSchema({
+    machines: defineTable(machineFields)
+        .index("by_machine_id", ["machineId"])
+        .index("by_owner", ["ownerId"]),
+    executions: defineTable(executionFields).index("by_machine", ["machineId"]),
+    /**
+     * Cached session tokens, keyed by a SHA-256 of the API key and endpoint.
+     * boxd rate-limits the key-for-token exchange per source IP, and every
+     * Convex deployment in a region shares a few egress IPs, so each action
+     * must reuse the token rather than exchange the key again. Internal only:
+     * nothing in the component's public API returns these rows.
+     */
+    sessions: defineTable({
+        keyHash: v.string(),
+        token: v.string(),
+        /** Epoch milliseconds. */
+        expiresAt: v.number(),
+    }).index("by_key_hash", ["keyHash"]),
+});
+//# sourceMappingURL=schema.js.map

package/dist/component/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/component/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAElC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,2DAA2D;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB;;;;OAIG;IACH,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,2EAA2E;IAC3E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,kEAAkE;IAClE,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACnC,0DAA0D;IAC1D,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,wEAAwE;IACxE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CACpC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EACpB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EACtB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CACpB,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,wDAAwD;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,eAAe;IACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAChC,qEAAqE;IACrE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACnC,CAAC;AAEF,eAAe,YAAY,CAAC;IAC1B,QAAQ,EAAE,WAAW,CAAC,aAAa,CAAC;SACjC,KAAK,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,CAAC;SACrC,KAAK,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;IACjC,UAAU,EAAE,WAAW,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,WAAW,CAAC,CAAC;IAC3E;;;;;;OAMG;IACH,QAAQ,EAAE,WAAW,CAAC;QACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,0BAA0B;QAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;KACtB,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,CAAC;CACrC,CAAC,CAAC"}

package/dist/component/sessions.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The session-token cache behind every boxd call. Internal functions only:
+ * the app can't read a token through the component's API.
+ */
+export declare const get: import("convex/server").RegisteredQuery<"internal", {
+    keyHash: string;
+}, Promise<{
+    token: string;
+    expiresAt: number;
+} | null>>;
+export declare const put: import("convex/server").RegisteredMutation<"internal", {
+    keyHash: string;
+    token: string;
+    expiresAt: number;
+}, Promise<null>>;
+/** Forget a token boxd rejected, so the next call exchanges the key again. */
+export declare const drop: import("convex/server").RegisteredMutation<"internal", {
+    keyHash: string;
+    token: string;
+}, Promise<null>>;
+//# sourceMappingURL=sessions.d.ts.map

package/dist/component/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/component/sessions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,eAAO,MAAM,GAAG;;;;;UAUd,CAAC;AAEH,eAAO,MAAM,GAAG;;;;iBAsBd,CAAC;AAEH,8EAA8E;AAC9E,eAAO,MAAM,IAAI;;;iBAaf,CAAC"}

package/dist/component/sessions.js

@@ -0,0 +1,59 @@
+/**
+ * The session-token cache behind every boxd call. Internal functions only:
+ * the app can't read a token through the component's API.
+ */
+import { v } from "convex/values";
+import { internalMutation, internalQuery } from "./_generated/server.js";
+const session = v.object({ token: v.string(), expiresAt: v.number() });
+export const get = internalQuery({
+    args: { keyHash: v.string() },
+    returns: v.union(v.null(), session),
+    handler: async (ctx, { keyHash }) => {
+        const row = await ctx.db
+            .query("sessions")
+            .withIndex("by_key_hash", (q) => q.eq("keyHash", keyHash))
+            .unique();
+        return row ? { token: row.token, expiresAt: row.expiresAt } : null;
+    },
+});
+export const put = internalMutation({
+    args: { keyHash: v.string(), token: v.string(), expiresAt: v.number() },
+    returns: v.null(),
+    handler: async (ctx, args) => {
+        const row = await ctx.db
+            .query("sessions")
+            .withIndex("by_key_hash", (q) => q.eq("keyHash", args.keyHash))
+            .unique();
+        if (row) {
+            // Two actions can exchange at the same time. Keep the token that lives
+            // longer, so a slow writer never replaces a fresher one.
+            if (row.expiresAt < args.expiresAt) {
+                await ctx.db.patch("sessions", row._id, {
+                    token: args.token,
+                    expiresAt: args.expiresAt,
+                });
+            }
+        }
+        else {
+            await ctx.db.insert("sessions", args);
+        }
+        return null;
+    },
+});
+/** Forget a token boxd rejected, so the next call exchanges the key again. */
+export const drop = internalMutation({
+    args: { keyHash: v.string(), token: v.string() },
+    returns: v.null(),
+    handler: async (ctx, { keyHash, token }) => {
+        const row = await ctx.db
+            .query("sessions")
+            .withIndex("by_key_hash", (q) => q.eq("keyHash", keyHash))
+            .unique();
+        // Only drop the token that failed: another action may already have
+        // stored a fresh one.
+        if (row && row.token === token)
+            await ctx.db.delete("sessions", row._id);
+        return null;
+    },
+});
+//# sourceMappingURL=sessions.js.map

package/dist/component/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../src/component/sessions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEzE,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,GAAG,GAAG,aAAa,CAAC;IAC/B,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC;IACnC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAClC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE;aACrB,KAAK,CAAC,UAAU,CAAC;aACjB,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;aACzD,MAAM,EAAE,CAAC;QACZ,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,GAAG,GAAG,gBAAgB,CAAC;IAClC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;IACvE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;IACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE;aACrB,KAAK,CAAC,UAAU,CAAC;aACjB,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;aAC9D,MAAM,EAAE,CAAC;QACZ,IAAI,GAAG,EAAE,CAAC;YACR,uEAAuE;YACvE,yDAAyD;YACzD,IAAI,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnC,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,EAAE;oBACtC,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC,CAAC;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,IAAI,GAAG,gBAAgB,CAAC;IACnC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;IAChD,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;IACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;QACzC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE;aACrB,KAAK,CAAC,UAAU,CAAC;aACjB,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;aACzD,MAAM,EAAE,CAAC;QACZ,mEAAmE;QACnE,sBAAsB;QACtB,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC,CAAC"}

package/dist/component/validate.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Argument checks that Convex validators can't express. Each one runs before
+ * any remote call or row write, and throws `INVALID_ARGUMENT`.
+ */
+/**
+ * A caller-supplied timeout, validated and capped. A value that is not a
+ * positive number fails loudly instead of meaning "no limit".
+ */
+export declare function boundedTimeout(requested: number | undefined, fallback: number, max: number, field: string): number;
+export declare function requirePort(port: number): number;
+/** A proxy name is one DNS label: `<name>.<machine>.<zone>`. */
+export declare function requireSubdomainLabel(name: string): string;
+export declare function requireAbsolutePath(path: string): string;
+export declare function requireNonEmpty(value: string, field: string): string;
+//# sourceMappingURL=validate.d.ts.map

package/dist/component/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/component/validate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GACZ,MAAM,CAQR;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKhD;AAID,gEAAgE;AAChE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO1D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKxD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAKpE"}

package/dist/component/validate.js

@@ -0,0 +1,44 @@
+/**
+ * Argument checks that Convex validators can't express. Each one runs before
+ * any remote call or row write, and throws `INVALID_ARGUMENT`.
+ */
+import { invalidArgument } from "./errors.js";
+/**
+ * A caller-supplied timeout, validated and capped. A value that is not a
+ * positive number fails loudly instead of meaning "no limit".
+ */
+export function boundedTimeout(requested, fallback, max, field) {
+    if (requested === undefined)
+        return fallback;
+    if (!Number.isFinite(requested) || requested <= 0) {
+        throw invalidArgument(`${field} must be a positive number of milliseconds, got ${requested}`);
+    }
+    return Math.min(Math.floor(requested), max);
+}
+export function requirePort(port) {
+    if (!Number.isInteger(port) || port < 1 || port > 65_535) {
+        throw invalidArgument(`port must be an integer in 1-65535, got ${port}`);
+    }
+    return port;
+}
+const SUBDOMAIN_LABEL = /^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$/;
+/** A proxy name is one DNS label: `<name>.<machine>.<zone>`. */
+export function requireSubdomainLabel(name) {
+    if (!SUBDOMAIN_LABEL.test(name)) {
+        throw invalidArgument(`name must be one DNS label (lowercase letters, digits and inner hyphens), got ${JSON.stringify(name)}`);
+    }
+    return name;
+}
+export function requireAbsolutePath(path) {
+    if (!path.startsWith("/")) {
+        throw invalidArgument(`path must be absolute, got ${JSON.stringify(path)}`);
+    }
+    return path;
+}
+export function requireNonEmpty(value, field) {
+    if (value.trim().length === 0) {
+        throw invalidArgument(`${field} must not be empty`);
+    }
+    return value;
+}
+//# sourceMappingURL=validate.js.map

package/dist/component/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/component/validate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,SAA6B,EAC7B,QAAgB,EAChB,GAAW,EACX,KAAa;IAEb,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,eAAe,CACnB,GAAG,KAAK,mDAAmD,SAAS,EAAE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;QACzD,MAAM,eAAe,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,eAAe,GAAG,sCAAsC,CAAC;AAE/D,gEAAgE;AAChE,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,eAAe,CACnB,iFAAiF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACxG,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,eAAe,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,KAAa;IAC1D,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,eAAe,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -0,0 +1,99 @@
+{
+  "name": "@boxd-sh/convex",
+  "description": "Convex component for boxd composable computers",
+  "repository": "github:azin-tech/boxd-convex",
+  "homepage": "https://github.com/azin-tech/boxd-convex#readme",
+  "bugs": {
+    "url": "https://github.com/azin-tech/boxd-convex/issues"
+  },
+  "version": "0.1.0",
+  "license": "MIT",
+  "author": "Azin",
+  "keywords": [
+    "convex",
+    "component",
+    "convex-component",
+    "boxd",
+    "sandbox",
+    "microvm",
+    "vm",
+    "code-execution",
+    "ai-agents"
+  ],
+  "type": "module",
+  "scripts": {
+    "build": "tsc --project ./tsconfig.build.json",
+    "build:codegen": "convex codegen --component-dir ./src/component && npm run build",
+    "build:clean": "rm -rf dist *.tsbuildinfo && npm run build:codegen",
+    "dev:demo": "vite --config demo/vite.config.ts",
+    "build:demo": "vite build --config demo/vite.config.ts",
+    "typecheck": "tsc --noEmit && tsc -p example/convex && tsc -p demo/convex && tsc -p demo",
+    "lint": "eslint .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "test": "vitest run --typecheck",
+    "test:watch": "vitest --typecheck --clearScreen false",
+    "test:live": "node scripts/live.mjs",
+    "check": "npm run build && npm run typecheck && npm run lint && npm run format:check && npm run test",
+    "prepare": "npm run build"
+  },
+  "files": [
+    "dist",
+    "src",
+    "!src/**/*.test.ts"
+  ],
+  "exports": {
+    "./package.json": "./package.json",
+    ".": {
+      "types": "./dist/client/index.d.ts",
+      "default": "./dist/client/index.js"
+    },
+    "./test": "./src/test.ts",
+    "./_generated/component.js": {
+      "types": "./dist/component/_generated/component.d.ts"
+    },
+    "./_generated/component": {
+      "types": "./dist/component/_generated/component.d.ts"
+    },
+    "./convex.config.js": {
+      "types": "./dist/component/convex.config.d.ts",
+      "default": "./dist/component/convex.config.js"
+    },
+    "./convex.config": {
+      "types": "./dist/component/convex.config.d.ts",
+      "default": "./dist/component/convex.config.js"
+    }
+  },
+  "types": "./dist/client/index.d.ts",
+  "module": "./dist/client/index.js",
+  "dependencies": {
+    "@boxd-sh/sdk": "^0.2.13"
+  },
+  "peerDependencies": {
+    "convex": "^1.46.0"
+  },
+  "devDependencies": {
+    "@auth/core": "^0.41.3",
+    "@convex-dev/auth": "^0.0.96",
+    "@convex-dev/eslint-plugin": "^5.0.0",
+    "@convex-dev/rate-limiter": "^0.4.0",
+    "@edge-runtime/vm": "^5.0.0",
+    "@eslint/js": "9.39.5",
+    "@types/node": "^24.13.3",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "@vitejs/plugin-react": "^6.1.1",
+    "convex": "^1.46.0",
+    "convex-test": "^0.0.60",
+    "eslint": "9.39.5",
+    "globals": "^17.9.0",
+    "jose": "^6.2.12",
+    "prettier": "3.9.6",
+    "react": "^19.3.0",
+    "react-dom": "^19.3.0",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "8.66.0",
+    "vite": "^8.3.1",
+    "vitest": "4.1.11"
+  }
+}

package/src/client/_generated/_ignore.ts

@@ -0,0 +1 @@
+// This is only here so convex-test can detect a _generated folder