@cabane/companion 0.6.203 → 0.6.205

package/dist/runtime.js

@@ -133,6 +133,16 @@ var ApiError = class extends CompanionError {
   status;
   body;
 };
+var EdgeBlockError = class extends ApiError {
+  constructor(status, ray, requestId) {
+    super(status, `${status} blocked by a proxy in front of Cabane`);
+    this.ray = ray;
+    this.requestId = requestId;
+    this.name = "EdgeBlockError";
+  }
+  ray;
+  requestId;
+};
 var ConfigError = class extends CompanionError {
   constructor(message) {
     super(message);
@@ -167,25 +177,7 @@ var prepareHookSchema = z.object({
   // Wall-clock cap for the hook. Provisioning is slow (minutes), so the
   // default is generous; a hook that hangs past this is killed and the turn
   // fails with a clear timeout message rather than pinning the companion.
-  timeoutMs: z.number().int().positive().optional(),
-  // Re-invoke the hook when a prepared result already exists, in VALIDATE
-  // mode: the cached result is handed back as `prepared` and stdout is
-  // ignored, so the cwd cannot move. Its only power is to exit non-zero and
-  // fail the turn. The hook resolves once per (conversation, agent), so a
-  // later message asking for a different environment is otherwise silently
-  // ignored; this lets a hook refuse it out loud.
-  //
-  // Default OFF: a hook that provisions unconditionally must not start
-  // running on every turn because the companion upgraded.
-  validateCached: z.boolean().optional(),
-  // Independent operator-owned reporter. Receives sanitized failure metadata
-  // on stdin; never re-enters this hook and cannot change the turn outcome.
-  failureReporter: z.object({
-    command: z.string().min(1),
-    args: z.array(z.string()).optional(),
-    env: z.record(z.string(), z.string()).optional(),
-    timeoutMs: z.number().int().positive().max(3e4).optional()
-  }).strict().optional()
+  timeoutMs: z.number().int().positive().optional()
 }).strict();
 var DEFAULT_TIMEOUT_MS = 10 * 6e4;
 var prepareResultSchema = z.object({
@@ -260,8 +252,7 @@ var companionConfigSchema = z2.object({
   // The DEVICE-LEVEL prepare hook, for every agent assigned here unless its own
   // `agents` row names one. Per-agent hooks alone make the config a second
   // silent roster: an agent nobody listed gets no hook and no error, and starts
-  // in the operator's `$HOME` (an agent woke in `/home/joshed` this way on
-  // 2026-08-17).
+  // in the operator's `$HOME`.
   prepareHook: prepareHookSchema.optional(),
   // `dashboardPort` and `autoOpen` are IGNORED by the CLI (no port, no browser)
   // but stay in the schema so an existing file still parses; the Electron shell
@@ -298,9 +289,10 @@ var companionConfigSchema = z2.object({
   root: z2.string().min(1).refine(isRootPath, { message: "must be an absolute path, or start with ~/" }).optional(),
   // An argv prefix the operator puts in front of every turn's runner: the companion starts
   // `<prefix…> <its own run-turn command…>` instead of the runner bare. What the prefix does
-  // is the operator's (a box of their own making, ENG225); the companion knows nothing of it
+  // is the operator's (a container or VM per turn, say); the companion knows nothing of it
   // beyond handing the runner over, with the turn's inputs in its environment and the
-  // credential and secrets on its stdin (`runner/launch.ts`, `boxed`).
+  // credential and secrets on its stdin (`runner/launch.ts`, `wrapped`). The README lists
+  // what a wrapper can rely on.
   runner: z2.object({
     command: z2.array(z2.string().min(1)).min(1)
   }).strict().optional()
@@ -312,33 +304,38 @@ function workRoot(cfg) {
   if (root.startsWith("~/")) return join4(homedir5(), root.slice(2));
   return root;
 }
-function retiredConfigKeys(raw) {
-  if (!raw || typeof raw !== "object") return [];
-  const obj = raw;
+var RETIRED_ROW_KEYS = ["sandbox"];
+var RETIRED_HOOK_KEYS = ["validateCached", "failureReporter"];
+function isObject(value) {
+  return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function splitRetired(raw) {
   const keys = [];
-  if ("runners" in obj) keys.push("runners");
-  const agents = obj.agents;
-  if (agents && typeof agents === "object") {
-    for (const [key, row] of Object.entries(agents)) {
-      if (row && typeof row === "object" && "sandbox" in row) keys.push(`agents.${key}.sandbox`);
+  const without = (obj, names, path) => {
+    const out = {};
+    for (const [k, v] of Object.entries(obj)) {
+      if (names.includes(k)) keys.push(`${path}${k}`);
+      else out[k] = v;
     }
+    return out;
+  };
+  const hook = (row, path) => isObject(row.prepareHook) ? { ...row, prepareHook: without(row.prepareHook, RETIRED_HOOK_KEYS, `${path}prepareHook.`) } : row;
+  const kept = hook(without(raw, ["runners"], ""), "");
+  if (isObject(kept.agents)) {
+    const agents = {};
+    for (const [key, row] of Object.entries(kept.agents)) {
+      const path = `agents.${key}.`;
+      agents[key] = isObject(row) ? hook(without(row, RETIRED_ROW_KEYS, path), path) : row;
+    }
+    kept.agents = agents;
   }
-  return keys;
+  return { keys, kept };
+}
+function retiredConfigKeys(raw) {
+  return isObject(raw) ? splitRetired(raw).keys : [];
 }
 function withoutRetiredKeys(raw) {
-  if (retiredConfigKeys(raw).length === 0) return raw;
-  const { runners: _runners, ...rest } = raw;
-  if (!rest.agents || typeof rest.agents !== "object") return rest;
-  const agents = {};
-  for (const [key, row] of Object.entries(rest.agents)) {
-    if (row && typeof row === "object" && "sandbox" in row) {
-      const { sandbox: _sandbox, ...kept } = row;
-      agents[key] = kept;
-    } else {
-      agents[key] = row;
-    }
-  }
-  return { ...rest, agents };
+  return isObject(raw) ? splitRetired(raw).kept : raw;
 }
 function retiredConfigKeysOnDisk() {
   try {
@@ -1598,7 +1595,7 @@ var emptyHeartbeatStatus = () => ({
 });
 
 // src/supervisor.ts
-import { hostname as hostname2 } from "os";
+import { hostname } from "os";
 
 // packages/agent-runtime/src/failure.ts
 import { z as z4 } from "zod";
@@ -1841,11 +1838,20 @@ function describeCause(err) {
   if (text === void 0 || text.length === 0) return void 0;
   return text.length > CAUSE_TEXT_CAP ? `${text.slice(0, CAUSE_TEXT_CAP)}\u2026` : text;
 }
+function edgeBlock(status, headers, raw) {
+  if (status !== 403 || !(headers.get("content-type") ?? "").includes("text/html")) return null;
+  const requestId = /Request ID:\s*(?:<[^>]*>\s*)*([A-Za-z0-9-]+)/i.exec(raw)?.[1];
+  return new EdgeBlockError(status, headers.get("cf-ray") ?? void 0, requestId);
+}
 function apiErrorLogFields(err) {
   const fields = {
     err: describeError(err)
   };
-  if (err instanceof ApiError) {
+  if (err instanceof EdgeBlockError) {
+    fields.status = err.status;
+    if (err.ray) fields.edgeRay = err.ray;
+    if (err.requestId) fields.edgeRequestId = err.requestId;
+  } else if (err instanceof ApiError) {
     fields.status = err.status;
     const body = describeErrorBody(err.body);
     if (body !== void 0) fields.responseBody = body;
@@ -1861,11 +1867,14 @@ var bootId = randomUUID();
 import { randomUUID as randomUUID5 } from "crypto";
 
 // src/api.ts
+import { promisify } from "util";
+import { gzip } from "zlib";
 var DEVICE_HEADER = "x-cabane-device";
 var RETRY_BACKOFF_MS = [250, 750];
 var TURN_CONTEXT_BACKOFF_MS = [250, 750, 2e3, 5e3];
 var ACTIVE_RUN_OUTBOX_SEQ = 0;
 var LEASE_CHECK_TIMEOUT_MS = 1e4;
+var gzipAsync = promisify(gzip);
 function activeRunOutboxKey(conversationId, agentId) {
   return `activerun:${conversationId}:${agentId}`;
 }
@@ -1885,19 +1894,24 @@ var CabaneApi = class {
   // rethrows transport errors (fetch reject) unchanged so the caller's retry
   // logic can classify them.
   async attempt(method, path, body, signal) {
+    const json = body !== void 0 ? JSON.stringify(body) : void 0;
+    const gzipped = json !== void 0 && this.opts.gzipBodies?.() === true;
     const res = await fetch(`${this.base}${path}`, {
       method,
       headers: {
         Authorization: `Bearer ${this.opts.token}`,
         ...this.opts.deviceToken ? { [DEVICE_HEADER]: this.opts.deviceToken } : {},
-        ...body !== void 0 ? { "content-type": "application/json" } : {},
+        ...json !== void 0 ? { "content-type": "application/json" } : {},
+        ...gzipped ? { "content-encoding": "gzip" } : {},
         accept: "application/json"
       },
-      ...body !== void 0 ? { body: JSON.stringify(body) } : {},
+      ...json !== void 0 ? { body: gzipped ? await gzipAsync(json) : json } : {},
       ...signal ? { signal } : {}
     });
     if (res.status === 204) return void 0;
     const raw = await res.text();
+    const blocked = edgeBlock(res.status, res.headers, raw);
+    if (blocked) throw blocked;
     let parsed = void 0;
     if (raw.length > 0) {
       try {
@@ -6378,7 +6392,7 @@ function createCodexAdapter(deps = {}) {
         if (signal.aborted) return;
         if (compactions === null) {
           deps.onWarn?.(
-            "codex adapter: the thread's compaction count could not be read \u2014 re-sending the standing instructions (ENG210)",
+            "codex adapter: the thread's compaction count could not be read \u2014 re-sending the standing instructions",
             { threadId: decision.resume }
           );
         } else if (decision.compactions === compactions) {
@@ -6388,7 +6402,7 @@ function createCodexAdapter(deps = {}) {
           };
         } else if (decision.compactions !== null && compactions > decision.compactions) {
           deps.onWarn?.(
-            "codex adapter: the thread compacted since the last turn \u2014 re-sending the standing instructions (ENG210)",
+            "codex adapter: the thread compacted since the last turn \u2014 re-sending the standing instructions",
             {
               threadId: decision.resume,
               compactions,
@@ -7539,8 +7553,6 @@ var ConnectorHealthStore = class {
 
 // src/dispatcher.ts
 import { randomUUID as randomUUID4 } from "crypto";
-import { existsSync as existsSync12, readdirSync as readdirSync2, statSync as statSync4 } from "fs";
-import { join as join21 } from "path";
 
 // src/runner/launch.ts
 import { createInterface } from "readline";
@@ -7579,8 +7591,8 @@ async function stopRemoteOpencodeSession(serverUrl, sessionId, opts = {}) {
 // src/turn-containment.ts
 import { execFile, execFileSync, spawn as spawn2 } from "child_process";
 import { readFileSync as readFileSync6 } from "fs";
-import { promisify } from "util";
-var execFileAsync = promisify(execFile);
+import { promisify as promisify2 } from "util";
+var execFileAsync = promisify2(execFile);
 var CONTAINMENT_STOP_GRACE_SEC = 5;
 var FALLBACK_GRACE_MS = CONTAINMENT_STOP_GRACE_SEC * 1e3;
 var OOM_READ_TIMEOUT_MS = 1500;
@@ -7733,7 +7745,10 @@ var runnerSpecSchema = z14.object({
   sessionWriteNoticeClaimed: z14.boolean(),
   // The runner's identity, minted with its credential. The start
   // PATCH carries it so the lease knows which runner holds the span.
-  runnerId: z14.string()
+  runnerId: z14.string(),
+  // Whether the server took gzip request bodies at the latest heartbeat, as of
+  // the start. The launcher writes `gzip_bodies` when that changes mid-turn.
+  gzipBodies: z14.boolean().optional()
 });
 var dispatchSchema = z14.object({
   type: z14.literal("device:dispatch_requested"),
@@ -7782,6 +7797,22 @@ function decodeRunnerEvent(line) {
 }
 
 // src/runner/launch.ts
+function gzipBodiesSignal() {
+  let on = false;
+  const listeners = /* @__PURE__ */ new Set();
+  return {
+    current: () => on,
+    subscribe(listener) {
+      listeners.add(listener);
+      return () => listeners.delete(listener);
+    },
+    set(next) {
+      if (next === on) return;
+      on = next;
+      for (const listener of listeners) listener(on);
+    }
+  };
+}
 function selfRunnerCommand() {
   const script = process.argv[1];
   if (!script) throw new Error("runner: cannot tell which script started this companion");
@@ -7790,7 +7821,7 @@ function selfRunnerCommand() {
 function wrappedRunnerCommand(prefix, own) {
   return [...prefix ?? [], ...own];
 }
-var BOXED_ENV_DROPPED = [
+var WRAPPED_ENV_DROPPED = [
   "ANTHROPIC_API_KEY",
   "CLAUDE_CODE_OAUTH_TOKEN",
   "CODEX_API_KEY",
@@ -7799,11 +7830,11 @@ var BOXED_ENV_DROPPED = [
   "DBUS_SESSION_BUS_ADDRESS",
   "XDG_RUNTIME_DIR"
 ];
-function runnerExecEnv(base, boxed) {
+function runnerExecEnv(base, wrapped) {
   const env = {};
   for (const [k, v] of Object.entries(base)) {
     if (v === void 0) continue;
-    if (boxed && BOXED_ENV_DROPPED.includes(k)) continue;
+    if (wrapped && WRAPPED_ENV_DROPPED.includes(k)) continue;
     env[k] = v;
   }
   return env;
@@ -7843,7 +7874,8 @@ function runnerSpec(opts, launch, duties, runnerId) {
     transcripts: opts.transcriptDir !== void 0,
     logLevel: opts.log.level,
     connectorHealth: healthSnapshot(launch.connectorHealth),
-    sessionWriteNoticeClaimed: duties.sessionWriteNoticeClaimed()
+    sessionWriteNoticeClaimed: duties.sessionWriteNoticeClaimed(),
+    ...launch.gzipBodies?.current() ? { gzipBodies: true } : {}
   };
 }
 var PINO_LEVELS = {
@@ -7967,6 +7999,7 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
   const stopRunner = new AbortController();
   let ready = false;
   let child;
+  let unsubscribeGzip;
   let stopAnnounced = false;
   const announceStop = () => {
     if (stopAnnounced || !child?.stdin.writable) return;
@@ -8025,13 +8058,13 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
     return { ok: false, durationMs: durationMs2, reason: reason2 };
   }
   try {
-    const boxed = launch.boxed === true;
-    const env = runnerExecEnv(launch.env ?? process.env, boxed);
+    const wrapped = launch.wrapped === true;
+    const env = runnerExecEnv(launch.env ?? process.env, wrapped);
     const grants = minted.deviceGrants.length > 0 ? launch.grants?.(minted.deviceGrants) ?? {} : {};
     const input = {
       baseUrl: opts.baseUrl,
       credential: minted.credential,
-      ...boxed ? { secrets: launch.secrets?.() ?? {} } : {},
+      ...wrapped ? { secrets: launch.secrets?.() ?? {} } : {},
       ...Object.keys(grants).length > 0 ? { grants } : {},
       dispatch: payload,
       turnId,
@@ -8044,6 +8077,10 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
       stdin: runnerStdin(input)
     });
     child = running;
+    unsubscribeGzip = launch.gzipBodies?.subscribe((on) => {
+      if (running.stdin.writable)
+        running.stdin.write(encodeLauncherMessage({ cabaneLauncher: "gzip_bodies", on }));
+    });
     if (controller.signal.aborted) announceStop();
     log.debug(
       { turnId, runnerPid: running.pid, provider: launch.provider.name },
@@ -8105,7 +8142,7 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
           locks?.release(lockOwner(event.id));
           return;
         case "process_group":
-          if (!boxed) groups.push(event.pgid);
+          if (!wrapped) groups.push(event.pgid);
           return;
         case "remote_session":
           remote.push({ serverUrl: event.serverUrl, sessionId: event.sessionId });
@@ -8129,6 +8166,7 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
     await Promise.all([stdoutDone, stderrDone]);
   } finally {
     if (locks) giveBackLocks(locks, `${turnId}#`, remote, launch, log);
+    unsubscribeGzip?.();
     child?.stdin.end();
     controller.signal.removeEventListener("abort", forwardStop);
     duties.releaseAbort(turnId, controller);
@@ -8180,7 +8218,7 @@ async function runTurnInRunner(opts, launch, duties, payload, handleOpts) {
 
 // src/turn-execution.ts
 import { createHash as createHash2, randomUUID as randomUUID3 } from "crypto";
-import { mkdirSync as mkdirSync9 } from "fs";
+import { existsSync as existsSync12, mkdirSync as mkdirSync9 } from "fs";
 
 // src/grants.ts
 import { existsSync as existsSync9, readFileSync as readFileSync7 } from "fs";
@@ -8234,7 +8272,7 @@ function loadGrantsFile(report) {
   const result = grantsFileSchema.safeParse(parsed);
   if (!result.success) {
     report.unreadable(
-      `${path} must map a secret's variable name to an object of "VARIABLE": "value" pairs (e.g. { "HAS_PROD_ACCESS": { "RENDER_API_KEY": "rnd_\u2026" } }).`
+      `${path} must map a secret's variable name to an object of "VARIABLE": "value" pairs (e.g. { "HAS_STAGING_DB": { "DATABASE_URL": "postgres://\u2026" } }).`
     );
     return {};
   }
@@ -8277,10 +8315,6 @@ import { homedir as homedir7 } from "os";
 import { join as join17 } from "path";
 import { createInterface as createInterface2 } from "readline";
 
-// src/prepare-failure.ts
-import { spawn as spawn3 } from "child_process";
-import { hostname } from "os";
-
 // src/prepared.ts
 import { mkdirSync as mkdirSync7, readFileSync as readFileSync8, rmSync as rmSync5, writeFileSync as writeFileSync5, existsSync as existsSync10 } from "fs";
 import { join as join18 } from "path";
@@ -8356,7 +8390,7 @@ function requiredSecretNames(mcpServers) {
 }
 
 // src/harness-usable.ts
-import { spawn as spawn4 } from "child_process";
+import { spawn as spawn3 } from "child_process";
 
 // src/harness-versions.ts
 var EMPTY = { claudeCode: null, opencode: null, codex: null };
@@ -8459,7 +8493,7 @@ function runBounded(path, args, env) {
     };
     let child;
     try {
-      child = spawn4(path, args, { stdio: ["ignore", "pipe", "pipe"], env });
+      child = spawn3(path, args, { stdio: ["ignore", "pipe", "pipe"], env });
     } catch {
       resolve({ code: null, output: "", error: "spawn" });
       return;
@@ -8626,7 +8660,7 @@ function hostReport() {
 }
 
 // src/providers/local-process.ts
-import { spawn as spawn5 } from "child_process";
+import { spawn as spawn4 } from "child_process";
 import { constants as constants2 } from "os";
 var DEFAULT_KILL_GRACE_MS = 3e4;
 var DEFAULT_REAP_GRACE_MS = 3e3;
@@ -8637,7 +8671,7 @@ function exitCode(code, signal) {
 }
 function createLocalProcessProvider(opts = {}) {
   const killGraceMs = opts.killGraceMs ?? DEFAULT_KILL_GRACE_MS;
-  const spawnFn = opts.spawnFn ?? spawn5;
+  const spawnFn = opts.spawnFn ?? spawn4;
   const reapGraceMs = opts.reapGraceMs ?? DEFAULT_REAP_GRACE_MS;
   const killFn = opts.killFn ?? ((pid, signal) => process.kill(pid, signal));
   const groupAlive = (pgid) => {
@@ -8841,7 +8875,7 @@ function checkReason(check) {
 
 // src/harness-copy.ts
 import { homedir as homedir8 } from "os";
-import { join as join22 } from "path";
+import { join as join21 } from "path";
 var HARNESS_LABELS = {
   "claude-code": "Claude Code",
   codex: "Codex",
@@ -8855,7 +8889,7 @@ function failureText(runtime, reason) {
     case "spawn":
       return `Couldn't check whether ${label} is signed in: Cabane's bundled ${label} wouldn't start. Repair it with  ${repairSteps()}  and try again.${spaced(repairCost())}`;
     case "config":
-      return `Couldn't check whether ${label} is signed in: its configuration file didn't load${runtime === "codex" ? ` (${tildePath(join22(homedir8(), ".codex", "config.toml"))})` : ""}. Fix it, then try again.`;
+      return `Couldn't check whether ${label} is signed in: its configuration file didn't load${runtime === "codex" ? ` (${tildePath(join21(homedir8(), ".codex", "config.toml"))})` : ""}. Fix it, then try again.`;
     case "unreadable":
       return `Couldn't check whether ${label} is signed in: it answered in a way Cabane couldn't read. Try again, and if it keeps happening, update Cabane.`;
   }
@@ -9114,13 +9148,13 @@ var DispatchClaims = class {
 import {
   existsSync as existsSync14,
   mkdirSync as mkdirSync10,
-  readdirSync as readdirSync3,
+  readdirSync as readdirSync2,
   readFileSync as readFileSync11,
   renameSync as renameSync5,
   rmSync as rmSync7,
   writeFileSync as writeFileSync6
 } from "fs";
-import { join as join23 } from "path";
+import { join as join22 } from "path";
 var MAX_ENTRIES = 2e3;
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
 var Outbox = class {
@@ -9133,10 +9167,10 @@ var Outbox = class {
   // Resolved lazily (per call) so tests that swap HOME between
   // cases route writes at the right tmpdir.
   dir() {
-    return join23(cabaneDir(), "outbox", encodeURIComponent(this.workspaceId));
+    return join22(cabaneDir(), "outbox", encodeURIComponent(this.workspaceId));
   }
   fileFor(turnId, seq) {
-    return join23(this.dir(), `${encodeURIComponent(turnId)}__${seq}.json`);
+    return join22(this.dir(), `${encodeURIComponent(turnId)}__${seq}.json`);
   }
   // Persist a commit for later draining. Atomic (temp file + rename) so a
   // concurrent `list()` never reads a half-written entry, then enforces the
@@ -9171,14 +9205,14 @@ var Outbox = class {
     if (!existsSync14(dir2)) return [];
     let names;
     try {
-      names = readdirSync3(dir2);
+      names = readdirSync2(dir2);
     } catch {
       return [];
     }
     const entries = [];
     for (const name of names) {
       if (!name.endsWith(".json")) continue;
-      const full = join23(dir2, name);
+      const full = join22(dir2, name);
       try {
         const parsed = JSON.parse(readFileSync11(full, "utf8"));
         if (parsed && typeof parsed.turnId === "string" && typeof parsed.seq === "number" && typeof parsed.path === "string") {
@@ -9215,7 +9249,7 @@ var Outbox = class {
   maxSeqForTurn(turnId) {
     const dir2 = this.dir();
     if (!existsSync14(dir2)) return 0;
-    const names = readdirSync3(dir2);
+    const names = readdirSync2(dir2);
     const prefix = `${encodeURIComponent(turnId)}__`;
     let max = 0;
     for (const name of names) {
@@ -9236,7 +9270,7 @@ var Outbox = class {
     const dir2 = this.dir();
     if (!existsSync14(dir2)) return 0;
     try {
-      return readdirSync3(dir2).filter((n) => n.endsWith(".json")).length;
+      return readdirSync2(dir2).filter((n) => n.endsWith(".json")).length;
     } catch {
       return 0;
     }
@@ -9400,9 +9434,9 @@ var SseSubscriber = class {
 };
 
 // src/updater.ts
-import { spawn as spawn6 } from "child_process";
+import { spawn as spawn5 } from "child_process";
 import { copyFileSync as copyFileSync2, existsSync as existsSync16, mkdirSync as mkdirSync14, renameSync as renameSync9, rmSync as rmSync10 } from "fs";
-import { dirname as dirname11, join as join27 } from "path";
+import { dirname as dirname11, join as join26 } from "path";
 
 // src/boot-rule.ts
 import {
@@ -9414,7 +9448,7 @@ import {
   symlinkSync,
   writeFileSync as writeFileSync7
 } from "fs";
-import { dirname as dirname8, join as join24 } from "path";
+import { dirname as dirname8, join as join23 } from "path";
 var UNCONFIRMED_WINDOW_MS = 10 * 6e4;
 var MAX_STAGE_ATTEMPTS = 3;
 function superseded(pending, ...running) {
@@ -9441,32 +9475,32 @@ import {
   lstatSync,
   mkdirSync as mkdirSync12,
   readFileSync as readFileSync13,
-  readdirSync as readdirSync4,
+  readdirSync as readdirSync3,
   realpathSync as realpathSync5,
   renameSync as renameSync7,
   rmSync as rmSync9,
   symlinkSync as symlinkSync2
 } from "fs";
-import { dirname as dirname9, join as join25 } from "path";
+import { dirname as dirname9, join as join24 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 function versionsDir() {
-  return join25(cabaneDir(), "versions");
+  return join24(cabaneDir(), "versions");
 }
 function currentLink() {
-  return join25(cabaneDir(), "current");
+  return join24(cabaneDir(), "current");
 }
 function bootGuardPath() {
-  return join25(cabaneDir(), "boot-guard.mjs");
+  return join24(cabaneDir(), "boot-guard.mjs");
 }
 function versionPackageRoot(version) {
-  return join25(versionsDir(), version, "node_modules", "@cabane", "companion");
+  return join24(versionsDir(), version, "node_modules", "@cabane", "companion");
 }
 function ownPackageRoot(moduleUrl = import.meta.url) {
   return dirname9(dirname9(fileURLToPath5(moduleUrl)));
 }
 function packageVersion(root) {
   try {
-    const pkg2 = JSON.parse(readFileSync13(join25(root, "package.json"), "utf8"));
+    const pkg2 = JSON.parse(readFileSync13(join24(root, "package.json"), "utf8"));
     return typeof pkg2.version === "string" ? pkg2.version : null;
   } catch {
     return null;
@@ -9475,7 +9509,7 @@ function packageVersion(root) {
 function currentRoot() {
   try {
     const root = realpathSync5(currentLink());
-    return existsSync15(join25(root, "dist", "cli.js")) ? root : null;
+    return existsSync15(join24(root, "dist", "cli.js")) ? root : null;
   } catch {
     return null;
   }
@@ -9496,9 +9530,9 @@ function pruneVersions(keep) {
   const dir2 = versionsDir();
   if (!existsSync15(dir2)) return [];
   const removed = [];
-  for (const name of readdirSync4(dir2)) {
+  for (const name of readdirSync3(dir2)) {
     if (keep.includes(name)) continue;
-    rmSync9(join25(dir2, name), { recursive: true, force: true });
+    rmSync9(join24(dir2, name), { recursive: true, force: true });
     removed.push(name);
   }
   return removed;
@@ -9517,7 +9551,7 @@ function compareVersions(a, b) {
 
 // src/update-state.ts
 import { mkdirSync as mkdirSync13, readFileSync as readFileSync14, renameSync as renameSync8, writeFileSync as writeFileSync8 } from "fs";
-import { dirname as dirname10, join as join26 } from "path";
+import { dirname as dirname10, join as join25 } from "path";
 import { z as z18 } from "zod";
 var resultSchema = z18.object({
   kind: z18.enum(["updated", "rolled_back", "failed"]),
@@ -9541,7 +9575,7 @@ var stateSchema = z18.object({
   failed: z18.object({ version: z18.string(), attempts: z18.number().int(), at: z18.string() }).optional()
 });
 function updateStatePath(dir2 = cabaneDir()) {
-  return join26(dir2, "update.json");
+  return join25(dir2, "update.json");
 }
 function readUpdateState(path = updateStatePath()) {
   try {
@@ -9590,7 +9624,7 @@ function rollBack(pending, reason, now = /* @__PURE__ */ new Date()) {
   return updateUpdateState((state) => rolledBackState(state, pending, reason, now));
 }
 function writeBootGuard(root = ownPackageRoot()) {
-  const built = join27(root, "dist", "boot-guard.js");
+  const built = join26(root, "dist", "boot-guard.js");
   if (!existsSync16(built)) return false;
   const target = bootGuardPath();
   mkdirSync14(dirname11(target), { recursive: true });
@@ -9607,7 +9641,7 @@ var runProcess = (command, args, opts = {}) => new Promise((resolve) => {
   let stderr = "";
   let child;
   try {
-    child = spawn6(command, [...args], {
+    child = spawn5(command, [...args], {
       stdio: ["ignore", "pipe", "pipe"],
       env: opts.env ?? process.env
     });
@@ -9630,17 +9664,17 @@ var runProcess = (command, args, opts = {}) => new Promise((resolve) => {
 async function stageVersion(version, harnesses, deps = {}) {
   const run = deps.run ?? runProcess;
   const node = deps.execPath ?? process.execPath;
-  const target = join27(versionsDir(), version);
+  const target = join26(versionsDir(), version);
   const placed = versionPackageRoot(version);
   if (existsSync16(placed)) {
     if (!await verifyInstall(placed, version, harnesses, { run, execPath: node }))
       return { ok: true, root: placed };
   }
-  const npm = join27(dirname11(node), "npm");
+  const npm = join26(dirname11(node), "npm");
   if (!existsSync16(npm))
     return { ok: false, reason: `there is no npm beside Node at ${dirname11(node)}` };
   mkdirSync14(versionsDir(), { recursive: true });
-  const staging = join27(versionsDir(), `.${version}.staging-${process.pid}`);
+  const staging = join26(versionsDir(), `.${version}.staging-${process.pid}`);
   rmSync10(staging, { recursive: true, force: true });
   const installed = await run(
     npm,
@@ -9669,7 +9703,7 @@ async function stageVersion(version, harnesses, deps = {}) {
       return { ok: false, reason: `version ${version} isn't published yet`, unpublished: true };
     return { ok: false, reason: `npm couldn't install it: ${lastLine(installed.stderr)}` };
   }
-  const root = join27(staging, "node_modules", "@cabane", "companion");
+  const root = join26(staging, "node_modules", "@cabane", "companion");
   const verdict = await verifyInstall(root, version, harnesses, { run, execPath: node });
   if (verdict) {
     rmSync10(staging, { recursive: true, force: true });
@@ -9681,7 +9715,7 @@ async function stageVersion(version, harnesses, deps = {}) {
 }
 async function verifyInstall(root, version, harnesses, deps) {
   if (packageVersion(root) !== version) return `the installed package isn't version ${version}`;
-  const answered = await deps.run(deps.execPath, [join27(root, "dist", "bin.js"), "--version"], {
+  const answered = await deps.run(deps.execPath, [join26(root, "dist", "bin.js"), "--version"], {
     timeoutMs: 6e4,
     env: { ...process.env, CABANE_LAUNCH_SELF: "1" }
   });
@@ -9689,7 +9723,7 @@ async function verifyInstall(root, version, harnesses, deps) {
     return `it doesn't start: ${lastLine(answered.stderr) || "no version printed"}`;
   }
   if (harnesses.length === 0) return null;
-  const probed = await deps.run(deps.execPath, [join27(root, "dist", "postinstall.js"), "--json"], {
+  const probed = await deps.run(deps.execPath, [join26(root, "dist", "postinstall.js"), "--json"], {
     timeoutMs: 6e4
   });
   let resolutions = {};
@@ -10060,6 +10094,10 @@ var CompanionSupervisor = class {
   reconciliationAbort = new AbortController();
   // The version-skew warning is logged once, not every heartbeat.
   versionSkewWarned = false;
+  // Whether the server takes gzip request bodies, as the latest accepted
+  // heartbeat said; false until one has. Read per request by every agent's API
+  // client and pushed to the runners in flight when it changes.
+  gzipBodies = gzipBodiesSignal();
   // This device's id, captured from the heartbeat / assignments response. The SSE
   // router uses it to tell a dispatch addressed to THIS device (a freshly-assigned
   // agent the last poll hasn't caught yet — the assignment-change race) from one
@@ -10106,13 +10144,13 @@ var CompanionSupervisor = class {
     if (this.stopped) return;
     this.log.info(
       { protocolVersion: TURN_PROTOCOL_VERSION, version: COMPANION_VERSION },
-      `Companion ${COMPANION_VERSION} starting on ${this.config.deviceLabel ?? hostname2()}`
+      `Companion ${COMPANION_VERSION} starting on ${this.config.deviceLabel ?? hostname()}`
     );
     const retired = retiredConfigKeysOnDisk();
     if (retired.length > 0) {
       this.log.warn(
         { keys: retired },
-        `config.json: ${retired.join(", ")} ${retired.length === 1 ? "is" : "are"} no longer read and can be removed. The companion does no sandboxing, and every turn runs in a child process of its own.`
+        `config.json: ${retired.join(", ")} ${retired.length === 1 ? "is" : "are"} no longer read and can be removed.`
       );
     }
     if (this.config.deviceToken) {
@@ -10152,7 +10190,7 @@ var CompanionSupervisor = class {
       log: this.log,
       lastEventId: null,
       onOpen: () => {
-        this.log.info(`Connected to Cabane as ${this.hub.statusJson().device_label ?? hostname2()}`);
+        this.log.info(`Connected to Cabane as ${this.hub.statusJson().device_label ?? hostname()}`);
         this.deviceConnected = true;
         for (const wr of this.workspaces.values()) {
           this.hub.setConnected(wr.workspaceId, true);
@@ -10262,6 +10300,7 @@ var CompanionSupervisor = class {
       this.hub.setDevice({ deviceId: res.deviceId });
       this.deviceId = res.deviceId;
       this.checkVersionSkew(res.serverVersion);
+      this.gzipBodies.set(res.acceptsGzipBodies === true);
       this.heartbeated = true;
       const view = acknowledgedDeviceSchema.safeParse(res.device);
       this.heartbeatStatus = {
@@ -10503,7 +10542,8 @@ var CompanionSupervisor = class {
       token: credential,
       ...this.config.deviceToken ? { deviceToken: this.config.deviceToken } : {},
       outbox,
-      log: agentLog
+      log: agentLog,
+      gzipBodies: () => this.gzipBodies.current()
     });
     const aborts = /* @__PURE__ */ new Map();
     const dispatcher = this.buildDispatcher({
@@ -10698,9 +10738,9 @@ var CompanionSupervisor = class {
           this.runnerCommand ?? selfRunnerCommand()
         ),
         ...this.config.runner?.command ? {
-          boxed: true,
+          wrapped: true,
           secrets: () => loadSecretValuesTolerant(
-            (m) => this.log.warn({ err: m }, "Could not read the secrets file for a boxed turn.")
+            (m) => this.log.warn({ err: m }, "Could not read the secrets file for a wrapped turn.")
           )
         } : {},
         // Read per dispatch, for the secret variables its mint named and no others.
@@ -10714,7 +10754,8 @@ var CompanionSupervisor = class {
         ...this.runnerEnv ? { env: this.runnerEnv } : {},
         reportRunnerGone: (report) => this.reportRunnerGone(report),
         connectorHealth: this.connectorHealth,
-        locks: this.runnerLocks
+        locks: this.runnerLocks,
+        gzipBodies: this.gzipBodies
       },
       observer: this.hub.observerFor(ctx.workspaceId, ctx.agentId, ctx.workspaceSlug),
       aborts: ctx.aborts
@@ -11379,9 +11420,9 @@ async function waitForBoundedHeartbeat(heartbeat) {
 }
 function defaultReexec() {
   clearRuntimeState();
-  void import("child_process").then(({ spawn: spawn7 }) => {
+  void import("child_process").then(({ spawn: spawn6 }) => {
     try {
-      const child = spawn7(process.execPath, process.argv.slice(1), {
+      const child = spawn6(process.execPath, process.argv.slice(1), {
         stdio: "inherit",
         detached: false
       });
@@ -11452,9 +11493,9 @@ function handleUncaught(log, err, origin) {
 
 // src/crash-marker.ts
 import { existsSync as existsSync17, mkdirSync as mkdirSync15, readFileSync as readFileSync15, rmSync as rmSync11, writeFileSync as writeFileSync9 } from "fs";
-import { join as join28 } from "path";
+import { join as join27 } from "path";
 function crashMarkerPath() {
-  return join28(cabaneDir(), "last-error.json");
+  return join27(cabaneDir(), "last-error.json");
 }
 function recordCrash(rec) {
   try {
@@ -11474,7 +11515,7 @@ function clearCrash() {
 // src/stray-companion.ts
 import { spawnSync } from "child_process";
 import { readFileSync as readFileSync16 } from "fs";
-import { join as join29 } from "path";
+import { join as join28 } from "path";
 var COMPANION_ENTRY = /@cabane\/companion\/|cabane-companion|(^|[\s/])cabane\s|\.cabane\/(versions|current|boot-guard)/;
 var START = /\sstart(\s|$)/;
 function companionStarts(psOutput) {
@@ -11491,7 +11532,7 @@ function companionStarts(psOutput) {
 }
 function stateDirOf(env) {
   const home = env.CABANE_COMPANION_HOME || env.HOME;
-  return home ? join29(home, ".cabane") : null;
+  return home ? join28(home, ".cabane") : null;
 }
 function envFromPsE(output, command) {
   const line = output.replace(/\n$/, "");