@cabane/companion 0.6.203 → 0.6.204

package/dist/runtime.js

@@ -167,25 +167,7 @@ var prepareHookSchema = z.object({
   // Wall-clock cap for the hook. Provisioning is slow (minutes), so the
   // default is generous; a hook that hangs past this is killed and the turn
   // fails with a clear timeout message rather than pinning the companion.
-  timeoutMs: z.number().int().positive().optional(),
-  // Re-invoke the hook when a prepared result already exists, in VALIDATE
-  // mode: the cached result is handed back as `prepared` and stdout is
-  // ignored, so the cwd cannot move. Its only power is to exit non-zero and
-  // fail the turn. The hook resolves once per (conversation, agent), so a
-  // later message asking for a different environment is otherwise silently
-  // ignored; this lets a hook refuse it out loud.
-  //
-  // Default OFF: a hook that provisions unconditionally must not start
-  // running on every turn because the companion upgraded.
-  validateCached: z.boolean().optional(),
-  // Independent operator-owned reporter. Receives sanitized failure metadata
-  // on stdin; never re-enters this hook and cannot change the turn outcome.
-  failureReporter: z.object({
-    command: z.string().min(1),
-    args: z.array(z.string()).optional(),
-    env: z.record(z.string(), z.string()).optional(),
-    timeoutMs: z.number().int().positive().max(3e4).optional()
-  }).strict().optional()
+  timeoutMs: z.number().int().positive().optional()
 }).strict();
 var DEFAULT_TIMEOUT_MS = 10 * 6e4;
 var prepareResultSchema = z.object({
@@ -260,8 +242,7 @@ var companionConfigSchema = z2.object({
   // The DEVICE-LEVEL prepare hook, for every agent assigned here unless its own
   // `agents` row names one. Per-agent hooks alone make the config a second
   // silent roster: an agent nobody listed gets no hook and no error, and starts
-  // in the operator's `$HOME` (an agent woke in `/home/joshed` this way on
-  // 2026-08-17).
+  // in the operator's `$HOME`.
   prepareHook: prepareHookSchema.optional(),
   // `dashboardPort` and `autoOpen` are IGNORED by the CLI (no port, no browser)
   // but stay in the schema so an existing file still parses; the Electron shell
@@ -298,9 +279,10 @@ var companionConfigSchema = z2.object({
   root: z2.string().min(1).refine(isRootPath, { message: "must be an absolute path, or start with ~/" }).optional(),
   // An argv prefix the operator puts in front of every turn's runner: the companion starts
   // `<prefix…> <its own run-turn command…>` instead of the runner bare. What the prefix does
-  // is the operator's (a box of their own making, ENG225); the companion knows nothing of it
+  // is the operator's (a container or VM per turn, say); the companion knows nothing of it
   // beyond handing the runner over, with the turn's inputs in its environment and the
-  // credential and secrets on its stdin (`runner/launch.ts`, `boxed`).
+  // credential and secrets on its stdin (`runner/launch.ts`, `wrapped`). The README lists
+  // what a wrapper can rely on.
   runner: z2.object({
     command: z2.array(z2.string().min(1)).min(1)
   }).strict().optional()
@@ -312,33 +294,38 @@ function workRoot(cfg) {
   if (root.startsWith("~/")) return join4(homedir5(), root.slice(2));
   return root;
 }
-function retiredConfigKeys(raw) {
-  if (!raw || typeof raw !== "object") return [];
-  const obj = raw;
+var RETIRED_ROW_KEYS = ["sandbox"];
+var RETIRED_HOOK_KEYS = ["validateCached", "failureReporter"];
+function isObject(value) {
+  return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function splitRetired(raw) {
   const keys = [];
-  if ("runners" in obj) keys.push("runners");
-  const agents = obj.agents;
-  if (agents && typeof agents === "object") {
-    for (const [key, row] of Object.entries(agents)) {
-      if (row && typeof row === "object" && "sandbox" in row) keys.push(`agents.${key}.sandbox`);
+  const without = (obj, names, path) => {
+    const out = {};
+    for (const [k, v] of Object.entries(obj)) {
+      if (names.includes(k)) keys.push(`${path}${k}`);
+      else out[k] = v;
+    }
+    return out;
+  };
+  const hook = (row, path) => isObject(row.prepareHook) ? { ...row, prepareHook: without(row.prepareHook, RETIRED_HOOK_KEYS, `${path}prepareHook.`) } : row;
+  const kept = hook(without(raw, ["runners"], ""), "");
+  if (isObject(kept.agents)) {
+    const agents = {};
+    for (const [key, row] of Object.entries(kept.agents)) {
+      const path = `agents.${key}.`;
+      agents[key] = isObject(row) ? hook(without(row, RETIRED_ROW_KEYS, path), path) : row;
     }
+    kept.agents = agents;
   }
-  return keys;
+  return { keys, kept };
+}
+function retiredConfigKeys(raw) {
+  return isObject(raw) ? splitRetired(raw).keys : [];
 }
 function withoutRetiredKeys(raw) {
-  if (retiredConfigKeys(raw).length === 0) return raw;
-  const { runners: _runners, ...rest } = raw;
-  if (!rest.agents || typeof rest.agents !== "object") return rest;
-  const agents = {};
-  for (const [key, row] of Object.entries(rest.agents)) {
-    if (row && typeof row === "object" && "sandbox" in row) {
-      const { sandbox: _sandbox, ...kept } = row;
-      agents[key] = kept;
-    } else {
-      agents[key] = row;
-    }
-  }
-  return { ...rest, agents };
+  return isObject(raw) ? splitRetired(raw).kept : raw;
 }
 function retiredConfigKeysOnDisk() {
   try {
@@ -1598,7 +1585,7 @@ var emptyHeartbeatStatus = () => ({
 });
 
 // src/supervisor.ts
-import { hostname as hostname2 } from "os";
+import { hostname } from "os";
 
 // packages/agent-runtime/src/failure.ts
 import { z as z4 } from "zod";
@@ -6378,7 +6365,7 @@ function createCodexAdapter(deps = {}) {
         if (signal.aborted) return;
         if (compactions === null) {
           deps.onWarn?.(
-            "codex adapter: the thread's compaction count could not be read \u2014 re-sending the standing instructions (ENG210)",
+            "codex adapter: the thread's compaction count could not be read \u2014 re-sending the standing instructions",
             { threadId: decision.resume }
           );
         } else if (decision.compactions === compactions) {
@@ -6388,7 +6375,7 @@ function createCodexAdapter(deps = {}) {
           };
         } else if (decision.compactions !== null && compactions > decision.compactions) {
           deps.onWarn?.(
-            "codex adapter: the thread compacted since the last turn \u2014 re-sending the standing instructions (ENG210)",
+            "codex adapter: the thread compacted since the last turn \u2014 re-sending the standing instructions",
             {
               threadId: decision.resume,
               compactions,
@@ -7539,8 +7526,6 @@ var ConnectorHealthStore = class {
 
 // src/dispatcher.ts
 import { randomUUID as randomUUID4 } from "crypto";
-import { existsSync as existsSync12, readdirSync as readdirSync2, statSync as statSync4 } from "fs";
-import { join as join21 } from "path";
 
 // src/runner/launch.ts
 import { createInterface } from "readline";
@@ -7790,7 +7775,7 @@ function selfRunnerCommand() {
 function wrappedRunnerCommand(prefix, own) {
   return [...prefix ?? [], ...own];
 }
-var BOXED_ENV_DROPPED = [
+var WRAPPED_ENV_DROPPED = [
   "ANTHROPIC_API_KEY",
   "CLAUDE_CODE_OAUTH_TOKEN",
   "CODEX_API_KEY",
@@ -7799,11 +7784,11 @@ var BOXED_ENV_DROPPED = [
   "DBUS_SESSION_BUS_ADDRESS",
   "XDG_RUNTIME_DIR"
 ];
-function runnerExecEnv(base, boxed) {
+function runnerExecEnv(base, wrapped) {
   const env = {};
   for (const [k, v] of Object.entries(base)) {
     if (v === void 0) continue;
-    if (boxed && BOXED_ENV_DROPPED.includes(k)) continue;
+    if (wrapped && WRAPPED_ENV_DROPPED.includes(k)) continue;
     env[k] = v;
   }
   return env;
@@ -8025,13 +8010,13 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
     return { ok: false, durationMs: durationMs2, reason: reason2 };
   }
   try {
-    const boxed = launch.boxed === true;
-    const env = runnerExecEnv(launch.env ?? process.env, boxed);
+    const wrapped = launch.wrapped === true;
+    const env = runnerExecEnv(launch.env ?? process.env, wrapped);
     const grants = minted.deviceGrants.length > 0 ? launch.grants?.(minted.deviceGrants) ?? {} : {};
     const input = {
       baseUrl: opts.baseUrl,
       credential: minted.credential,
-      ...boxed ? { secrets: launch.secrets?.() ?? {} } : {},
+      ...wrapped ? { secrets: launch.secrets?.() ?? {} } : {},
       ...Object.keys(grants).length > 0 ? { grants } : {},
       dispatch: payload,
       turnId,
@@ -8105,7 +8090,7 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
           locks?.release(lockOwner(event.id));
           return;
         case "process_group":
-          if (!boxed) groups.push(event.pgid);
+          if (!wrapped) groups.push(event.pgid);
           return;
         case "remote_session":
           remote.push({ serverUrl: event.serverUrl, sessionId: event.sessionId });
@@ -8180,7 +8165,7 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
 
 // src/turn-execution.ts
 import { createHash as createHash2, randomUUID as randomUUID3 } from "crypto";
-import { mkdirSync as mkdirSync9 } from "fs";
+import { existsSync as existsSync12, mkdirSync as mkdirSync9 } from "fs";
 
 // src/grants.ts
 import { existsSync as existsSync9, readFileSync as readFileSync7 } from "fs";
@@ -8234,7 +8219,7 @@ function loadGrantsFile(report) {
   const result = grantsFileSchema.safeParse(parsed);
   if (!result.success) {
     report.unreadable(
-      `${path} must map a secret's variable name to an object of "VARIABLE": "value" pairs (e.g. { "HAS_PROD_ACCESS": { "RENDER_API_KEY": "rnd_\u2026" } }).`
+      `${path} must map a secret's variable name to an object of "VARIABLE": "value" pairs (e.g. { "HAS_STAGING_DB": { "DATABASE_URL": "postgres://\u2026" } }).`
     );
     return {};
   }
@@ -8277,10 +8262,6 @@ import { homedir as homedir7 } from "os";
 import { join as join17 } from "path";
 import { createInterface as createInterface2 } from "readline";
 
-// src/prepare-failure.ts
-import { spawn as spawn3 } from "child_process";
-import { hostname } from "os";
-
 // src/prepared.ts
 import { mkdirSync as mkdirSync7, readFileSync as readFileSync8, rmSync as rmSync5, writeFileSync as writeFileSync5, existsSync as existsSync10 } from "fs";
 import { join as join18 } from "path";
@@ -8356,7 +8337,7 @@ function requiredSecretNames(mcpServers) {
 }
 
 // src/harness-usable.ts
-import { spawn as spawn4 } from "child_process";
+import { spawn as spawn3 } from "child_process";
 
 // src/harness-versions.ts
 var EMPTY = { claudeCode: null, opencode: null, codex: null };
@@ -8459,7 +8440,7 @@ function runBounded(path, args, env) {
     };
     let child;
     try {
-      child = spawn4(path, args, { stdio: ["ignore", "pipe", "pipe"], env });
+      child = spawn3(path, args, { stdio: ["ignore", "pipe", "pipe"], env });
     } catch {
       resolve({ code: null, output: "", error: "spawn" });
       return;
@@ -8626,7 +8607,7 @@ function hostReport() {
 }
 
 // src/providers/local-process.ts
-import { spawn as spawn5 } from "child_process";
+import { spawn as spawn4 } from "child_process";
 import { constants as constants2 } from "os";
 var DEFAULT_KILL_GRACE_MS = 3e4;
 var DEFAULT_REAP_GRACE_MS = 3e3;
@@ -8637,7 +8618,7 @@ function exitCode(code, signal) {
 }
 function createLocalProcessProvider(opts = {}) {
   const killGraceMs = opts.killGraceMs ?? DEFAULT_KILL_GRACE_MS;
-  const spawnFn = opts.spawnFn ?? spawn5;
+  const spawnFn = opts.spawnFn ?? spawn4;
   const reapGraceMs = opts.reapGraceMs ?? DEFAULT_REAP_GRACE_MS;
   const killFn = opts.killFn ?? ((pid, signal) => process.kill(pid, signal));
   const groupAlive = (pgid) => {
@@ -8841,7 +8822,7 @@ function checkReason(check) {
 
 // src/harness-copy.ts
 import { homedir as homedir8 } from "os";
-import { join as join22 } from "path";
+import { join as join21 } from "path";
 var HARNESS_LABELS = {
   "claude-code": "Claude Code",
   codex: "Codex",
@@ -8855,7 +8836,7 @@ function failureText(runtime, reason) {
     case "spawn":
       return `Couldn't check whether ${label} is signed in: Cabane's bundled ${label} wouldn't start. Repair it with  ${repairSteps()}  and try again.${spaced(repairCost())}`;
     case "config":
-      return `Couldn't check whether ${label} is signed in: its configuration file didn't load${runtime === "codex" ? ` (${tildePath(join22(homedir8(), ".codex", "config.toml"))})` : ""}. Fix it, then try again.`;
+      return `Couldn't check whether ${label} is signed in: its configuration file didn't load${runtime === "codex" ? ` (${tildePath(join21(homedir8(), ".codex", "config.toml"))})` : ""}. Fix it, then try again.`;
     case "unreadable":
       return `Couldn't check whether ${label} is signed in: it answered in a way Cabane couldn't read. Try again, and if it keeps happening, update Cabane.`;
   }
@@ -9114,13 +9095,13 @@ var DispatchClaims = class {
 import {
   existsSync as existsSync14,
   mkdirSync as mkdirSync10,
-  readdirSync as readdirSync3,
+  readdirSync as readdirSync2,
   readFileSync as readFileSync11,
   renameSync as renameSync5,
   rmSync as rmSync7,
   writeFileSync as writeFileSync6
 } from "fs";
-import { join as join23 } from "path";
+import { join as join22 } from "path";
 var MAX_ENTRIES = 2e3;
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
 var Outbox = class {
@@ -9133,10 +9114,10 @@ var Outbox = class {
   // Resolved lazily (per call) so tests that swap HOME between
   // cases route writes at the right tmpdir.
   dir() {
-    return join23(cabaneDir(), "outbox", encodeURIComponent(this.workspaceId));
+    return join22(cabaneDir(), "outbox", encodeURIComponent(this.workspaceId));
   }
   fileFor(turnId, seq) {
-    return join23(this.dir(), `${encodeURIComponent(turnId)}__${seq}.json`);
+    return join22(this.dir(), `${encodeURIComponent(turnId)}__${seq}.json`);
   }
   // Persist a commit for later draining. Atomic (temp file + rename) so a
   // concurrent `list()` never reads a half-written entry, then enforces the
@@ -9171,14 +9152,14 @@ var Outbox = class {
     if (!existsSync14(dir2)) return [];
     let names;
     try {
-      names = readdirSync3(dir2);
+      names = readdirSync2(dir2);
     } catch {
       return [];
     }
     const entries = [];
     for (const name of names) {
       if (!name.endsWith(".json")) continue;
-      const full = join23(dir2, name);
+      const full = join22(dir2, name);
       try {
         const parsed = JSON.parse(readFileSync11(full, "utf8"));
         if (parsed && typeof parsed.turnId === "string" && typeof parsed.seq === "number" && typeof parsed.path === "string") {
@@ -9215,7 +9196,7 @@ var Outbox = class {
   maxSeqForTurn(turnId) {
     const dir2 = this.dir();
     if (!existsSync14(dir2)) return 0;
-    const names = readdirSync3(dir2);
+    const names = readdirSync2(dir2);
     const prefix = `${encodeURIComponent(turnId)}__`;
     let max = 0;
     for (const name of names) {
@@ -9236,7 +9217,7 @@ var Outbox = class {
     const dir2 = this.dir();
     if (!existsSync14(dir2)) return 0;
     try {
-      return readdirSync3(dir2).filter((n) => n.endsWith(".json")).length;
+      return readdirSync2(dir2).filter((n) => n.endsWith(".json")).length;
     } catch {
       return 0;
     }
@@ -9400,9 +9381,9 @@ var SseSubscriber = class {
 };
 
 // src/updater.ts
-import { spawn as spawn6 } from "child_process";
+import { spawn as spawn5 } from "child_process";
 import { copyFileSync as copyFileSync2, existsSync as existsSync16, mkdirSync as mkdirSync14, renameSync as renameSync9, rmSync as rmSync10 } from "fs";
-import { dirname as dirname11, join as join27 } from "path";
+import { dirname as dirname11, join as join26 } from "path";
 
 // src/boot-rule.ts
 import {
@@ -9414,7 +9395,7 @@ import {
   symlinkSync,
   writeFileSync as writeFileSync7
 } from "fs";
-import { dirname as dirname8, join as join24 } from "path";
+import { dirname as dirname8, join as join23 } from "path";
 var UNCONFIRMED_WINDOW_MS = 10 * 6e4;
 var MAX_STAGE_ATTEMPTS = 3;
 function superseded(pending, ...running) {
@@ -9441,32 +9422,32 @@ import {
   lstatSync,
   mkdirSync as mkdirSync12,
   readFileSync as readFileSync13,
-  readdirSync as readdirSync4,
+  readdirSync as readdirSync3,
   realpathSync as realpathSync5,
   renameSync as renameSync7,
   rmSync as rmSync9,
   symlinkSync as symlinkSync2
 } from "fs";
-import { dirname as dirname9, join as join25 } from "path";
+import { dirname as dirname9, join as join24 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 function versionsDir() {
-  return join25(cabaneDir(), "versions");
+  return join24(cabaneDir(), "versions");
 }
 function currentLink() {
-  return join25(cabaneDir(), "current");
+  return join24(cabaneDir(), "current");
 }
 function bootGuardPath() {
-  return join25(cabaneDir(), "boot-guard.mjs");
+  return join24(cabaneDir(), "boot-guard.mjs");
 }
 function versionPackageRoot(version) {
-  return join25(versionsDir(), version, "node_modules", "@cabane", "companion");
+  return join24(versionsDir(), version, "node_modules", "@cabane", "companion");
 }
 function ownPackageRoot(moduleUrl = import.meta.url) {
   return dirname9(dirname9(fileURLToPath5(moduleUrl)));
 }
 function packageVersion(root) {
   try {
-    const pkg2 = JSON.parse(readFileSync13(join25(root, "package.json"), "utf8"));
+    const pkg2 = JSON.parse(readFileSync13(join24(root, "package.json"), "utf8"));
     return typeof pkg2.version === "string" ? pkg2.version : null;
   } catch {
     return null;
@@ -9475,7 +9456,7 @@ function packageVersion(root) {
 function currentRoot() {
   try {
     const root = realpathSync5(currentLink());
-    return existsSync15(join25(root, "dist", "cli.js")) ? root : null;
+    return existsSync15(join24(root, "dist", "cli.js")) ? root : null;
   } catch {
     return null;
   }
@@ -9496,9 +9477,9 @@ function pruneVersions(keep) {
   const dir2 = versionsDir();
   if (!existsSync15(dir2)) return [];
   const removed = [];
-  for (const name of readdirSync4(dir2)) {
+  for (const name of readdirSync3(dir2)) {
     if (keep.includes(name)) continue;
-    rmSync9(join25(dir2, name), { recursive: true, force: true });
+    rmSync9(join24(dir2, name), { recursive: true, force: true });
     removed.push(name);
   }
   return removed;
@@ -9517,7 +9498,7 @@ function compareVersions(a, b) {
 
 // src/update-state.ts
 import { mkdirSync as mkdirSync13, readFileSync as readFileSync14, renameSync as renameSync8, writeFileSync as writeFileSync8 } from "fs";
-import { dirname as dirname10, join as join26 } from "path";
+import { dirname as dirname10, join as join25 } from "path";
 import { z as z18 } from "zod";
 var resultSchema = z18.object({
   kind: z18.enum(["updated", "rolled_back", "failed"]),
@@ -9541,7 +9522,7 @@ var stateSchema = z18.object({
   failed: z18.object({ version: z18.string(), attempts: z18.number().int(), at: z18.string() }).optional()
 });
 function updateStatePath(dir2 = cabaneDir()) {
-  return join26(dir2, "update.json");
+  return join25(dir2, "update.json");
 }
 function readUpdateState(path = updateStatePath()) {
   try {
@@ -9590,7 +9571,7 @@ function rollBack(pending, reason, now = /* @__PURE__ */ new Date()) {
   return updateUpdateState((state) => rolledBackState(state, pending, reason, now));
 }
 function writeBootGuard(root = ownPackageRoot()) {
-  const built = join27(root, "dist", "boot-guard.js");
+  const built = join26(root, "dist", "boot-guard.js");
   if (!existsSync16(built)) return false;
   const target = bootGuardPath();
   mkdirSync14(dirname11(target), { recursive: true });
@@ -9607,7 +9588,7 @@ var runProcess = (command, args, opts = {}) => new Promise((resolve) => {
   let stderr = "";
   let child;
   try {
-    child = spawn6(command, [...args], {
+    child = spawn5(command, [...args], {
       stdio: ["ignore", "pipe", "pipe"],
       env: opts.env ?? process.env
     });
@@ -9630,17 +9611,17 @@ var runProcess = (command, args, opts = {}) => new Promise((resolve) => {
 async function stageVersion(version, harnesses, deps = {}) {
   const run = deps.run ?? runProcess;
   const node = deps.execPath ?? process.execPath;
-  const target = join27(versionsDir(), version);
+  const target = join26(versionsDir(), version);
   const placed = versionPackageRoot(version);
   if (existsSync16(placed)) {
     if (!await verifyInstall(placed, version, harnesses, { run, execPath: node }))
       return { ok: true, root: placed };
   }
-  const npm = join27(dirname11(node), "npm");
+  const npm = join26(dirname11(node), "npm");
   if (!existsSync16(npm))
     return { ok: false, reason: `there is no npm beside Node at ${dirname11(node)}` };
   mkdirSync14(versionsDir(), { recursive: true });
-  const staging = join27(versionsDir(), `.${version}.staging-${process.pid}`);
+  const staging = join26(versionsDir(), `.${version}.staging-${process.pid}`);
   rmSync10(staging, { recursive: true, force: true });
   const installed = await run(
     npm,
@@ -9669,7 +9650,7 @@ async function stageVersion(version, harnesses, deps = {}) {
       return { ok: false, reason: `version ${version} isn't published yet`, unpublished: true };
     return { ok: false, reason: `npm couldn't install it: ${lastLine(installed.stderr)}` };
   }
-  const root = join27(staging, "node_modules", "@cabane", "companion");
+  const root = join26(staging, "node_modules", "@cabane", "companion");
   const verdict = await verifyInstall(root, version, harnesses, { run, execPath: node });
   if (verdict) {
     rmSync10(staging, { recursive: true, force: true });
@@ -9681,7 +9662,7 @@ async function stageVersion(version, harnesses, deps = {}) {
 }
 async function verifyInstall(root, version, harnesses, deps) {
   if (packageVersion(root) !== version) return `the installed package isn't version ${version}`;
-  const answered = await deps.run(deps.execPath, [join27(root, "dist", "bin.js"), "--version"], {
+  const answered = await deps.run(deps.execPath, [join26(root, "dist", "bin.js"), "--version"], {
     timeoutMs: 6e4,
     env: { ...process.env, CABANE_LAUNCH_SELF: "1" }
   });
@@ -9689,7 +9670,7 @@ async function verifyInstall(root, version, harnesses, deps) {
     return `it doesn't start: ${lastLine(answered.stderr) || "no version printed"}`;
   }
   if (harnesses.length === 0) return null;
-  const probed = await deps.run(deps.execPath, [join27(root, "dist", "postinstall.js"), "--json"], {
+  const probed = await deps.run(deps.execPath, [join26(root, "dist", "postinstall.js"), "--json"], {
     timeoutMs: 6e4
   });
   let resolutions = {};
@@ -10106,13 +10087,13 @@ var CompanionSupervisor = class {
     if (this.stopped) return;
     this.log.info(
       { protocolVersion: TURN_PROTOCOL_VERSION, version: COMPANION_VERSION },
-      `Companion ${COMPANION_VERSION} starting on ${this.config.deviceLabel ?? hostname2()}`
+      `Companion ${COMPANION_VERSION} starting on ${this.config.deviceLabel ?? hostname()}`
     );
     const retired = retiredConfigKeysOnDisk();
     if (retired.length > 0) {
       this.log.warn(
         { keys: retired },
-        `config.json: ${retired.join(", ")} ${retired.length === 1 ? "is" : "are"} no longer read and can be removed. The companion does no sandboxing, and every turn runs in a child process of its own.`
+        `config.json: ${retired.join(", ")} ${retired.length === 1 ? "is" : "are"} no longer read and can be removed.`
       );
     }
     if (this.config.deviceToken) {
@@ -10152,7 +10133,7 @@ var CompanionSupervisor = class {
       log: this.log,
       lastEventId: null,
       onOpen: () => {
-        this.log.info(`Connected to Cabane as ${this.hub.statusJson().device_label ?? hostname2()}`);
+        this.log.info(`Connected to Cabane as ${this.hub.statusJson().device_label ?? hostname()}`);
         this.deviceConnected = true;
         for (const wr of this.workspaces.values()) {
           this.hub.setConnected(wr.workspaceId, true);
@@ -10698,9 +10679,9 @@ var CompanionSupervisor = class {
           this.runnerCommand ?? selfRunnerCommand()
         ),
         ...this.config.runner?.command ? {
-          boxed: true,
+          wrapped: true,
           secrets: () => loadSecretValuesTolerant(
-            (m) => this.log.warn({ err: m }, "Could not read the secrets file for a boxed turn.")
+            (m) => this.log.warn({ err: m }, "Could not read the secrets file for a wrapped turn.")
           )
         } : {},
         // Read per dispatch, for the secret variables its mint named and no others.
@@ -11379,9 +11360,9 @@ async function waitForBoundedHeartbeat(heartbeat) {
 }
 function defaultReexec() {
   clearRuntimeState();
-  void import("child_process").then(({ spawn: spawn7 }) => {
+  void import("child_process").then(({ spawn: spawn6 }) => {
     try {
-      const child = spawn7(process.execPath, process.argv.slice(1), {
+      const child = spawn6(process.execPath, process.argv.slice(1), {
         stdio: "inherit",
         detached: false
       });
@@ -11452,9 +11433,9 @@ function handleUncaught(log, err, origin) {
 
 // src/crash-marker.ts
 import { existsSync as existsSync17, mkdirSync as mkdirSync15, readFileSync as readFileSync15, rmSync as rmSync11, writeFileSync as writeFileSync9 } from "fs";
-import { join as join28 } from "path";
+import { join as join27 } from "path";
 function crashMarkerPath() {
-  return join28(cabaneDir(), "last-error.json");
+  return join27(cabaneDir(), "last-error.json");
 }
 function recordCrash(rec) {
   try {
@@ -11474,7 +11455,7 @@ function clearCrash() {
 // src/stray-companion.ts
 import { spawnSync } from "child_process";
 import { readFileSync as readFileSync16 } from "fs";
-import { join as join29 } from "path";
+import { join as join28 } from "path";
 var COMPANION_ENTRY = /@cabane\/companion\/|cabane-companion|(^|[\s/])cabane\s|\.cabane\/(versions|current|boot-guard)/;
 var START = /\sstart(\s|$)/;
 function companionStarts(psOutput) {
@@ -11491,7 +11472,7 @@ function companionStarts(psOutput) {
 }
 function stateDirOf(env) {
   const home = env.CABANE_COMPANION_HOME || env.HOME;
-  return home ? join29(home, ".cabane") : null;
+  return home ? join28(home, ".cabane") : null;
 }
 function envFromPsE(output, command) {
   const line = output.replace(/\n$/, "");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cabane/companion",
-  "version": "0.6.203",
+  "version": "0.6.204",
   "type": "module",
   "description": "The Cabane Companion (headless): connect an agent on your machine to your Cabane workspace as a responder — drive work against your own codebase, files, and MCP servers without putting any of it in Cabane.",
   "license": "UNLICENSED",