@hlix/cli 1.0.2 → 1.0.4

package/README.md

@@ -14,10 +14,11 @@ auth, retry and error mapping.
 
 `hlix` on its own opens **Hlix Code**, the interactive terminal harness. It
 gives you a coding agent with every CLI command available as a slash command,
-and it chooses where that agent's files and shell live: your project's cloud
-Coding Workspace when the folder is bound to hlix, a Docker container when one
-is running, and this machine otherwise. `--sandbox cloud|docker|local` decides
-it yourself; `--local` is short for `--sandbox local`. The Docker sandbox runs
+and it chooses where that agent's files and shell live: your project's
+Cloud Machine when the folder is bound to hlix, and a local environment on this
+machine otherwise. `--sandbox cloud|docker|local` selects the environment;
+`--sandbox docker` uses a Docker container, and `--local` is short for
+`--sandbox local`. The Docker container runs
 `node:22-bookworm` (git, node, python3 — no bun); `--docker-image <ref>`, or
 `hlix config set dockerImage <ref>`, runs a different one. No official image
 carries all four: `oven/bun`'s Debian variant ships bun alone, and its `node` is
@@ -27,7 +28,7 @@ that has git, node, bun and python3 together.
 
 Hlix Code needs no model key of your own. `hlix auth login` is the whole setup:
 the workspace the credential names pays for the coder, and `/model` offers only
-the models that workspace serves. In a `local` or `docker` sandbox you may add
+the models that workspace serves. In a local environment or Docker container you may add
 endpoints of your own — see **Your own model endpoints** below.
 
 The npm package requires Node.js 22.19 or newer. The Homebrew install
@@ -54,8 +55,8 @@ For CI, and for anything else that must not change underneath you, pin the
 version instead of floating to `latest`:
 
 ```bash
-npm install --global @hlix/cli@1.0.2
-npx @hlix/cli@1.0.2 status --json
+npm install --global @hlix/cli@1.0.4
+npx @hlix/cli@1.0.4 status --json
 ```
 
 ## Authenticate
@@ -124,7 +125,7 @@ hlix tasks watch <id>          # follows the task's live status until it is over
 `--dry-run` on `push`, `pull` and `sync` prints the divergence and the verdict
 the real command would reach, and changes nothing. Sync refuses simultaneous local and remote changes.
 
-`hlix import .` scans the selected root and pushes source files into **HLIX Repos** through Git. It keeps the local repository and its origin intact. `--history preserve` retains scanned source history; incomplete scans or secret findings require review or `--history sanitize`. Protected files move through the encrypted secrets channel. File browsing does not start the project's Coding Workspace.
+`hlix import .` scans the selected root and pushes source files into **HLIX Repos** through Git. It keeps the local repository and its origin intact. `--history preserve` retains scanned source history; incomplete scans or secret findings require review or `--history sanitize`. Protected files move through the encrypted secrets channel. File browsing does not start the project's Cloud Machine.
 
 ## Hlix Code
 
@@ -137,6 +138,17 @@ hlix -p "fix the build" --yolo          # …and let that turn change files
 hlix -p "what does this repo do" --json # JSONL events instead of prose
 ```
 
+Local and Docker command tools wait up to 10 seconds, then return a tracked
+process ID while the command continues. Long builds have no implicit command
+deadline. The agent can inspect or stop the same process; required results reach
+it before a headless or ACP task finishes. If a command remains running, the
+agent receives a status check after a minute. Explicit command timeouts still
+terminate the command. Cancellation stops the session's command processes;
+headless task completion also cleans up its background servers. Full output is
+stored under `.hlix/tool-output/`. The Hlix agent inside a hosted Cloudflare box
+uses this local process path. The remote Cloud Machine CLI transport retains
+its own command limits.
+
 Inside the shell:
 
 |                                           |                                                                                          |

package/THIRD_PARTY_NOTICES

@@ -15,7 +15,7 @@ does not carry that entry can reproduce for it, and for a compiled binary it is
 also its own. Where such an entry ships a licence of its OWN, that text is kept
 with this generator instead and the entry is listed under it.
 
-Packages (272)
+Packages (273)
 --------------
 
   @a2a-js/sdk (Apache-2.0)
@@ -266,6 +266,7 @@ Packages (272)
   trough (MIT)
   tslib (0BSD)
   tweetnacl (Unlicense)
+  undici (MIT)
   undici-types (MIT)
   unicorn-magic (MIT)
   unified (MIT)
@@ -5223,6 +5224,7 @@ OTHER DEALINGS IN THE SOFTWARE.
 For more information, please refer to <http://unlicense.org>
 
 ==============================================================================
+undici (MIT)
 undici-types (MIT)
 ==============================================================================