@jabezpauls/agentbox 0.1.6 → 0.1.9

package/dist/agentbox.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// agentbox-cli v0.1.6
+// agentbox-cli v0.1.9
 import { createRequire as __agentboxCreateRequire } from "node:module";
 const require = __agentboxCreateRequire(import.meta.url);
 var __create = Object.create;
@@ -3868,7 +3868,8 @@ function parseSize(raw) {
 }
 
 // src/version.ts
-var VERSION = true ? "v0.1.6" : "0.0.0-dev";
+var VERSION = true ? "v0.1.9" : "0.0.0-dev";
+var STANDALONE = typeof __AGENTBOX_STANDALONE__ === "boolean" && __AGENTBOX_STANDALONE__;
 var MIN_NODE_MAJOR = 20;
 function nodeMajor(version = process.versions.node) {
   return Number(version.split(".")[0]);
@@ -7974,6 +7975,7 @@ var TERMINAL_COMMANDS = [attach, shell];
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { randomBytes as randomBytes4 } from "node:crypto";
 import fs10 from "node:fs";
+import os9 from "node:os";
 import path11 from "node:path";
 var MAX_BUNDLE = 16 * 1024 * 1024;
 function bundleVersion(bundle) {
@@ -8008,6 +8010,27 @@ function npmVersionFor(boxVersion) {
   const m = /^v?(\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?)$/.exec(boxVersion ?? "");
   return m ? m[1] : "latest";
 }
+function nodeCredentials(env, platform = process.platform) {
+  const candidates = [];
+  if (platform === "win32") {
+    if (env.LOCALAPPDATA && path11.win32.isAbsolute(env.LOCALAPPDATA)) candidates.push(path11.join(env.LOCALAPPDATA, "agentbox", "node", "credentials.json"));
+  } else {
+    const xdg = env.XDG_DATA_HOME;
+    if (xdg && path11.isAbsolute(xdg)) candidates.push(path11.join(xdg, "agentbox", "node", "credentials.json"));
+    candidates.push(path11.join(env.HOME || os9.homedir(), ".local", "share", "agentbox", "node", "credentials.json"));
+  }
+  return candidates.find((f) => fs10.existsSync(f)) ?? null;
+}
+function signedUpdatesOnly(env, platform = process.platform, standalone = STANDALONE) {
+  const creds = nodeCredentials(env, platform);
+  if (creds) {
+    return `this machine is joined to a box as a node (${creds}), so agentbox here updates only from signed releases, never from a box: the node checks for them itself (\`updates\` in its policy.json), or see https://github.com/jabezpauls/agentbox/releases`;
+  }
+  if (standalone) {
+    return "this is the standalone agentbox, which updates only from signed releases, never from a box; download the latest from https://github.com/jabezpauls/agentbox/releases";
+  }
+  return null;
+}
 var update = command({
   path: ["update"],
   summary: "replace this CLI with the box's own build",
@@ -8018,6 +8041,8 @@ var update = command({
   ],
   details: "Downloads /cli/agentbox.mjs from the box (the current one, or --box), checks it runs, and swaps it in\nin one step.",
   async run(ctx, p) {
+    const signedOnly = signedUpdatesOnly(ctx.env, ctx.platform);
+    if (signedOnly) throw new CliError(signedOnly);
     const { name, box } = ctx.selected();
     const self = selfInstall(process.argv[1]);
     if (!self) throw new CliError("cannot tell which file this CLI runs from");
@@ -8166,7 +8191,7 @@ function groupHelp(prefix) {
 }
 
 // src/context.ts
-import os9 from "node:os";
+import os10 from "node:os";
 var VERSION_CHECK_MS = 24 * 60 * 6e4;
 var Context = class {
   constructor(io, env, config, globals, platform = process.platform, now = Date.now) {
@@ -8224,7 +8249,7 @@ var Context = class {
   }
   /** Where temporary files go: `$TMPDIR` (or Windows' `%TEMP%`), else the system's. */
   tempRoot() {
-    return this.env.TMPDIR || this.env.TEMP || this.env.TMP || os9.tmpdir();
+    return this.env.TMPDIR || this.env.TEMP || this.env.TMP || os10.tmpdir();
   }
   printJson(value) {
     this.out(`${JSON.stringify(value, null, 2)}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@jabezpauls/agentbox",
   "type": "module",
-  "version": "0.1.6",
+  "version": "0.1.9",
   "description": "agentbox from your own machine: sign in, attach, move files, mount the workspace.",
   "license": "MIT",
   "homepage": "https://github.com/jabezpauls/agentbox/blob/main/docs/cli.md",
@@ -35,6 +35,7 @@
   },
   "scripts": {
     "build": "node scripts/build.mjs",
+    "build:sea": "node scripts/build-sea.mjs",
     "e2e": "node e2e/run.mjs",
     "prepack": "node scripts/build.mjs",
     "test": "vitest run",
@@ -46,6 +47,7 @@
     "@types/ws": "^8",
     "esbuild": "^0.28",
     "eslint": "^9",
+    "postject": "1.0.0-alpha.6",
     "typescript": "^5.6",
     "typescript-eslint": "^8",
     "vitest": "^2",