@sleds/cli 0.1.48 → 0.1.49

package/dist/sleds.mjs

@@ -4246,7 +4246,7 @@ async function actualTool(ctx, args, to = { path: "/proxy/estimate/actual" }) {
   const from = str5(r.elapsedFrom);
   const unsized = r.unsized === true;
   const bits = [
-    recorded !== undefined ? `${recorded} min${from ? ` measured from the ${from}` : ""}${num3(r.saidMinutes) !== undefined && num3(r.saidMinutes) !== recorded ? ` (you said ${num3(r.saidMinutes)})` : ""}` : phases ? "phases recorded" : null,
+    recorded !== undefined ? `${recorded} min${from === "runs" ? " of engine run time" : from ? ` measured from the ${from}` : ""}${num3(r.saidMinutes) !== undefined && num3(r.saidMinutes) !== recorded ? ` (you said ${num3(r.saidMinutes)})` : ""}` : phases ? "phases recorded" : null,
     num3(args.usd) !== undefined ? usd2(num3(args.usd)) : args.usd === null ? "$ cleared" : null,
     num3(args.tokensIn) !== undefined || num3(args.tokensOut) !== undefined ? `${(num3(args.tokensIn) ?? 0) + (num3(args.tokensOut) ?? 0)} tokens` : null,
     str5(args.model),
@@ -9951,8 +9951,8 @@ import {
   rmSync as rmSync13,
   writeFileSync as writeFileSync19
 } from "node:fs";
-import { tmpdir } from "node:os";
-import { delimiter as delimiter3, dirname as dirname16, join as join25, resolve as resolve9 } from "node:path";
+import { tmpdir, userInfo as userInfo2 } from "node:os";
+import { delimiter as delimiter3, dirname as dirname17, join as join25, resolve as resolve9 } from "node:path";
 
 // src/agentMcp.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
@@ -11161,10 +11161,11 @@ import {
   readFileSync as readFileSync15,
   existsSync as realExists,
   rmSync as rmSync10,
+  statSync as statSync5,
   writeFileSync as writeFileSync16
 } from "node:fs";
-import { hostname as hostname2 } from "node:os";
-import { join as join23, resolve as resolve8 } from "node:path";
+import { hostname as hostname2, userInfo } from "node:os";
+import { dirname as dirname15, isAbsolute as isAbsolute3, join as join23, resolve as resolve8 } from "node:path";
 
 // src/engine/beat.ts
 var BEAT_EVERY_MS = 60000;
@@ -11176,7 +11177,7 @@ function beatBody(state, flags, host = {}, cap = {}) {
     name: flags.name,
     os: host.os ?? process.platform,
     runner: flags.runner,
-    version: host.version ?? "0.1.48" ?? "dev",
+    version: host.version ?? "0.1.49" ?? "dev",
     running: live.length,
     items: live.slice(0, BEAT_ITEMS).map((r) => `${r.item}/${r.node}`),
     ...cap.atOnce !== undefined ? { atOnce: cap.atOnce } : {},
@@ -16900,7 +16901,7 @@ async function fetchVersion(o) {
   const platform = o.platform ?? process.platform;
   const arch = o.arch ?? process.arch;
   const publicKey = o.publicKey ?? RELEASE_PUBLIC_KEY;
-  const running = o.running ?? "0.1.48";
+  const running = o.running ?? "0.1.49";
   if (!publicKey)
     return { ok: false, why: "no release key yet" };
   if (!VERSION_RE2.test(o.version))
@@ -18166,10 +18167,11 @@ var VALUE_FLAGS = [
   "hold-cpu",
   "hold-load",
   "hold-pressure",
-  "hold"
+  "hold",
+  "lent-by"
 ];
 var BOOL_FLAGS = ["once", "strict-mcp", "no-strict-mcp", "sandbox", "no-sandbox"];
-var ENGINE_USAGE = "usage: sleds engine [--name <n>] [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--interval <s>] [--lease <min>] [--idle <min>] [--repo <path>] [--repos-dir <dir[:dir…]>] [--jira <EPIC>] [--mode <permission-mode>] [--model <id>] [--decider-model <id>] [--effort <e>] [--decider-effort <e>] [--drafter-model <id>] [--drafter-effort <e>] [--branch '<template>'] [--pr-title '<template>'] [--events <file>] [--org <slug>] [--strict-mcp [--mcp-allow <a,b>] | --no-strict-mcp] [--sandbox [--sandbox-allow <a,b>] | --no-sandbox] [--hold-cpu <%>] [--hold-load <per-core>] [--hold-pressure warn|critical] [--hold on|off] [--once]";
+var ENGINE_USAGE = "usage: sleds engine [--name <n>] [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--interval <s>] [--lease <min>] [--idle <min>] [--repo <path>] [--repos-dir <dir[:dir…]>] [--jira <EPIC>] [--mode <permission-mode>] [--model <id>] [--decider-model <id>] [--effort <e>] [--decider-effort <e>] [--drafter-model <id>] [--drafter-effort <e>] [--branch '<template>'] [--pr-title '<template>'] [--events <file>] [--org <slug>] [--strict-mcp [--mcp-allow <a,b>] | --no-strict-mcp] [--sandbox [--sandbox-allow <a,b>] | --no-sandbox] [--lent-by <lender> --sandbox] [--hold-cpu <%>] [--hold-load <per-core>] [--hold-pressure warn|critical] [--hold on|off] [--once]";
 function templateProblem(flag, template, jira = false) {
   const known = flag === "branch" ? BRANCH_FIELDS : PR_TITLE_FIELDS;
   const used = templateFields(template);
@@ -18267,6 +18269,9 @@ function parseEngineArgs(argv, host) {
     return {
       error: `--sandbox-allow takes hosts like pypi.org or *.example.com — no scheme, port or path (got ${badHost})`
     };
+  const lentBy = s("lent-by")?.trim();
+  if (lentBy && !raw.sandbox)
+    return { error: LENT_NEEDS_SANDBOX };
   const opt = (k, v) => v ? { [k]: v } : {};
   return {
     flags: {
@@ -18297,6 +18302,7 @@ function parseEngineArgs(argv, host) {
       ...mcpAllow.length ? { mcpAllow } : {},
       ...raw.sandbox ? { sandbox: true } : raw["no-sandbox"] ? { sandbox: false } : {},
       ...sandboxAllow.length ? { sandboxAllow: [...new Set(sandboxAllow)] } : {},
+      ...opt("lentBy", lentBy),
       ...holdCpu !== undefined ? { holdCpu } : {},
       ...holdLoad !== undefined ? { holdLoad } : {},
       ...holdPressure ? { holdPressure } : {},
@@ -18479,7 +18485,7 @@ function engineClient(o, org) {
     return fetchClient({
       ...src,
       timeoutMs: ENGINE_TIMEOUT_MS,
-      version: "0.1.48"
+      version: "0.1.49"
     });
   const asked = org?.trim() || env.SLEDS_ORG?.trim();
   if (asked && !selectOrg(readConfig(o.home), org, env).seat)
@@ -18700,6 +18706,36 @@ function gitCommonDirOf(exec, cwd) {
     throw new Error(`git has no common dir for ${cwd}, so the sandbox has nowhere to commit`);
   return resolve8(cwd, dir);
 }
+var LENT_NEEDS_SANDBOX = "a lent engine runs every session sandboxed (spec 48 rule 10) — add --sandbox to --lent-by";
+function lenderHome(accountHome, lentBy) {
+  return isAbsolute3(lentBy) ? resolve8(lentBy) : join23(dirname15(accountHome), lentBy);
+}
+function lentHomeProblems(accountHome, lentBy, modeOf) {
+  const lender = lenderHome(accountHome, lentBy);
+  if (lender === resolve8(accountHome))
+    return [
+      `--lent-by ${lentBy} is this account — a lent engine runs as the borrower's own OS user, not the lender's`
+    ];
+  const problems = [];
+  for (const [who, home] of [
+    ["the borrower's", resolve8(accountHome)],
+    ["the lender's", lender]
+  ]) {
+    const mode = modeOf(home);
+    if (mode === null)
+      problems.push(`${who} home ${home} cannot be read — is ${lentBy} right?`);
+    else if ((mode & 63) !== 0)
+      problems.push(`${who} home ${home} is ${(mode & 511).toString(8)}, open to other users — run: sudo chmod 700 ${home}`);
+  }
+  return problems;
+}
+var homeMode = (path) => {
+  try {
+    return statSync5(path).mode & 4095;
+  } catch {
+    return null;
+  }
+};
 function pinOrg2(configJson, org) {
   if (!org)
     return configJson;
@@ -18740,7 +18776,7 @@ async function driveEngine(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.48"
+    cliVersion: "0.1.49"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
@@ -18818,6 +18854,7 @@ async function drive(o, flags, deps, until, beat) {
   deps.log = (line) => event(noteEvent(line));
   let running = 0;
   let down = 0;
+  await until.beforeFirstTick?.();
   for (;; ) {
     let report = null;
     try {
@@ -19085,7 +19122,7 @@ import {
   writeFileSync as writeFileSync17
 } from "node:fs";
 import { hostname as hostname3 } from "node:os";
-import { basename as basename6, dirname as dirname15, isAbsolute as isAbsolute3, join as join24 } from "node:path";
+import { basename as basename6, dirname as dirname16, isAbsolute as isAbsolute4, join as join24 } from "node:path";
 init_state();
 var ENGINE_LABEL = "ai.sleds.engine";
 var ENGINE_INSTALL_USAGE = `usage: sleds engine install [engine flags]   |   sleds engine uninstall [--name <n>] [--org <slug>]
@@ -19093,7 +19130,7 @@ ${ENGINE_USAGE}`;
 function stableArgv(argv, realpath = realpathSync, home) {
   const link = sledsLink(home);
   return argv.map((a) => {
-    if (!isAbsolute3(a) || a === link)
+    if (!isAbsolute4(a) || a === link)
       return a;
     try {
       return realpath(a);
@@ -19279,7 +19316,7 @@ function engineInstall(o) {
   if (platform === "linux")
     return installUnit({ o, parsed, label, sledsArgv, env: agentEnv, logPath, exec });
   const plist = enginePlistPath(o.home, parsed.name, parsed.org, seat);
-  mkdirSync19(dirname15(plist), { recursive: true });
+  mkdirSync19(dirname16(plist), { recursive: true });
   if (existsSync19(plist))
     exec("launchctl", ["unload", plist]);
   for (const other of installedEngines(o.home)) {
@@ -19321,7 +19358,7 @@ function installUnit(a) {
   const unit = engineUnitPath(o.home, label);
   const unitName = basename6(unit);
   const systemctl = (...args) => exec("systemctl", ["--user", ...args]);
-  mkdirSync19(dirname15(unit), { recursive: true });
+  mkdirSync19(dirname16(unit), { recursive: true });
   if (existsSync19(unit))
     systemctl("stop", unitName);
   for (const other of installedEngines(o.home)) {
@@ -19697,7 +19734,7 @@ async function runDoctor(o) {
     checks.push({ level: "ok", name: "path", detail: which[0] ?? "" });
   const link = sledsLink(home, o.platform);
   if (existsSync21(link)) {
-    const binDir = dirname16(link);
+    const binDir = dirname17(link);
     const onPath = (env.PATH ?? "").split(delimiter3).includes(binDir);
     const first = which[0];
     const fix = `echo 'export PATH="${binDir}:$PATH"' >> ~/.zshrc`;
@@ -19935,6 +19972,8 @@ function engineChecks(o, env) {
   const org = engineOrg({ home: o.home, env }).slug;
   const engines = installedEngines(o.home).filter((e) => e.manager === manager && (e.org === null || !org || e.org === org));
   const need = engines.length > 0 ? "fail" : "warn";
+  if (o.lentBy && !engines.some((e) => engineArg(e.programArgs, "lent-by")))
+    checks.push(...lentChecks(o, o.lentBy, null));
   const runner = engines.map((e) => engineArg(e.programArgs, "runner")).find(Boolean) ?? "tmux";
   const gh = which("gh");
   if (!gh)
@@ -20034,9 +20073,30 @@ function engineChecks(o, env) {
       detail: `${e.label} names no --repos-dir — it works only if your engine profile sets Repos folders`,
       fix: "set Repos folders in Settings › Running work, or sleds engine install --repos-dir ~/code"
     });
+    const lentBy = engineArg(e.programArgs, "lent-by");
+    if (lentBy)
+      checks.push(...lentChecks(o, lentBy, e));
   }
   return checks;
 }
+function lentChecks(o, lentBy, engine) {
+  const checks = [];
+  const problems = lentHomeProblems((o.accountHome ?? (() => userInfo2().homedir))(), lentBy, o.homeMode ?? homeMode);
+  checks.push(problems.length === 0 ? { level: "ok", name: "lent homes", detail: `lent by ${lentBy} · both homes 700` } : {
+    level: "fail",
+    name: "lent homes",
+    detail: problems.join("; "),
+    fix: "sudo chmod 700 on each home named (the lender runs it for theirs)"
+  });
+  if (engine)
+    checks.push(engine.programArgs.includes("--sandbox") ? { level: "ok", name: "lent sandbox", detail: `${engine.label} runs --sandbox` } : {
+      level: "fail",
+      name: "lent sandbox",
+      detail: `${engine.label}: ${LENT_NEEDS_SANDBOX}`,
+      fix: `sleds engine install --lent-by ${lentBy} --sandbox`
+    });
+  return checks;
+}
 function boxChecks(o, env, which, need) {
   const claude = which("claude");
   const file = boxEnvPath(o.home);
@@ -20151,10 +20211,11 @@ import {
   readFileSync as readFileSync20,
   existsSync as realExists2,
   rmSync as rmSync14,
+  statSync as statSync6,
   writeFileSync as writeFileSync20
 } from "node:fs";
-import { hostname as hostname4 } from "node:os";
-import { join as join26, resolve as resolve10 } from "node:path";
+import { hostname as hostname4, userInfo as userInfo3 } from "node:os";
+import { dirname as dirname18, isAbsolute as isAbsolute5, join as join26, resolve as resolve10 } from "node:path";
 init_machine();
 init_state();
 init_meter();
@@ -20190,10 +20251,11 @@ var VALUE_FLAGS2 = [
   "hold-cpu",
   "hold-load",
   "hold-pressure",
-  "hold"
+  "hold",
+  "lent-by"
 ];
 var BOOL_FLAGS2 = ["once", "strict-mcp", "no-strict-mcp", "sandbox", "no-sandbox"];
-var ENGINE_USAGE2 = "usage: sleds engine [--name <n>] [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--interval <s>] [--lease <min>] [--idle <min>] [--repo <path>] [--repos-dir <dir[:dir…]>] [--jira <EPIC>] [--mode <permission-mode>] [--model <id>] [--decider-model <id>] [--effort <e>] [--decider-effort <e>] [--drafter-model <id>] [--drafter-effort <e>] [--branch '<template>'] [--pr-title '<template>'] [--events <file>] [--org <slug>] [--strict-mcp [--mcp-allow <a,b>] | --no-strict-mcp] [--sandbox [--sandbox-allow <a,b>] | --no-sandbox] [--hold-cpu <%>] [--hold-load <per-core>] [--hold-pressure warn|critical] [--hold on|off] [--once]";
+var ENGINE_USAGE2 = "usage: sleds engine [--name <n>] [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--interval <s>] [--lease <min>] [--idle <min>] [--repo <path>] [--repos-dir <dir[:dir…]>] [--jira <EPIC>] [--mode <permission-mode>] [--model <id>] [--decider-model <id>] [--effort <e>] [--decider-effort <e>] [--drafter-model <id>] [--drafter-effort <e>] [--branch '<template>'] [--pr-title '<template>'] [--events <file>] [--org <slug>] [--strict-mcp [--mcp-allow <a,b>] | --no-strict-mcp] [--sandbox [--sandbox-allow <a,b>] | --no-sandbox] [--lent-by <lender> --sandbox] [--hold-cpu <%>] [--hold-load <per-core>] [--hold-pressure warn|critical] [--hold on|off] [--once]";
 function templateProblem2(flag, template, jira = false) {
   const known = flag === "branch" ? BRANCH_FIELDS : PR_TITLE_FIELDS;
   const used = templateFields(template);
@@ -20291,6 +20353,9 @@ function parseEngineArgs2(argv, host) {
     return {
       error: `--sandbox-allow takes hosts like pypi.org or *.example.com — no scheme, port or path (got ${badHost})`
     };
+  const lentBy = s("lent-by")?.trim();
+  if (lentBy && !raw.sandbox)
+    return { error: LENT_NEEDS_SANDBOX2 };
   const opt = (k, v) => v ? { [k]: v } : {};
   return {
     flags: {
@@ -20321,6 +20386,7 @@ function parseEngineArgs2(argv, host) {
       ...mcpAllow.length ? { mcpAllow } : {},
       ...raw.sandbox ? { sandbox: true } : raw["no-sandbox"] ? { sandbox: false } : {},
       ...sandboxAllow.length ? { sandboxAllow: [...new Set(sandboxAllow)] } : {},
+      ...opt("lentBy", lentBy),
       ...holdCpu !== undefined ? { holdCpu } : {},
       ...holdLoad !== undefined ? { holdLoad } : {},
       ...holdPressure ? { holdPressure } : {},
@@ -20555,7 +20621,7 @@ function engineClient2(o, org) {
     return fetchClient({
       ...src,
       timeoutMs: ENGINE_TIMEOUT_MS2,
-      version: "0.1.48"
+      version: "0.1.49"
     });
   const asked = org?.trim() || env.SLEDS_ORG?.trim();
   if (asked && !selectOrg(readConfig(o.home), org, env).seat)
@@ -20786,6 +20852,8 @@ function gitCommonDirOf2(exec, cwd) {
   return resolve10(cwd, dir);
 }
 function sandboxRefusal(flags) {
+  if (flags.lentBy && !flags.sandbox)
+    return LENT_NEEDS_SANDBOX2;
   if (!flags.sandbox)
     return null;
   if (flags.runner === "conductor")
@@ -20796,6 +20864,36 @@ function sandboxRefusal(flags) {
     return "sandboxed sessions: Codex's sandbox walls writes, not reads — the seat token stays readable; use Claude Code, or --no-sandbox";
   return null;
 }
+var LENT_NEEDS_SANDBOX2 = "a lent engine runs every session sandboxed (spec 48 rule 10) — add --sandbox to --lent-by";
+function lenderHome2(accountHome, lentBy) {
+  return isAbsolute5(lentBy) ? resolve10(lentBy) : join26(dirname18(accountHome), lentBy);
+}
+function lentHomeProblems2(accountHome, lentBy, modeOf) {
+  const lender = lenderHome2(accountHome, lentBy);
+  if (lender === resolve10(accountHome))
+    return [
+      `--lent-by ${lentBy} is this account — a lent engine runs as the borrower's own OS user, not the lender's`
+    ];
+  const problems = [];
+  for (const [who, home] of [
+    ["the borrower's", resolve10(accountHome)],
+    ["the lender's", lender]
+  ]) {
+    const mode = modeOf(home);
+    if (mode === null)
+      problems.push(`${who} home ${home} cannot be read — is ${lentBy} right?`);
+    else if ((mode & 63) !== 0)
+      problems.push(`${who} home ${home} is ${(mode & 511).toString(8)}, open to other users — run: sudo chmod 700 ${home}`);
+  }
+  return problems;
+}
+var homeMode2 = (path) => {
+  try {
+    return statSync6(path).mode & 4095;
+  } catch {
+    return null;
+  }
+};
 function pinOrg3(configJson, org) {
   if (!org)
     return configJson;
@@ -20836,7 +20934,7 @@ async function driveEngine2(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.48"
+    cliVersion: "0.1.49"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
@@ -20914,6 +21012,7 @@ async function drive2(o, flags, deps, until, beat) {
   deps.log = (line) => event(noteEvent(line));
   let running = 0;
   let down = 0;
+  await until.beforeFirstTick?.();
   for (;; ) {
     let report = null;
     try {
@@ -21095,6 +21194,14 @@ var engineCmd = async (o) => {
     error(refusal);
     return 2;
   }
+  if (flags.lentBy) {
+    const open = lentHomeProblems2((o.accountHome ?? (() => userInfo3().homedir))(), flags.lentBy, o.homeMode ?? homeMode2);
+    if (open.length) {
+      for (const line of open)
+        error(`lent engine: ${line}`);
+      return 2;
+    }
+  }
   if (flags.sandbox && flags.runner === "managed")
     notes.push("sandboxed sessions: the managed runner's container is its own sandbox — the engine's settings do not reach it");
   let source;
@@ -21186,6 +21293,7 @@ var engineCmd = async (o) => {
       watch.beat();
     return update();
   };
+  let beforeFirstTick;
   if (client) {
     const send = beater(client, o.now ?? Date.now);
     let noted;
@@ -21204,20 +21312,33 @@ var engineCmd = async (o) => {
       refused = r.refused;
       error(r.below ? `${r.refused}. This engine is not shown as up until it beats on a version SLEDS serves.` : `${r.refused}. This engine is not shown as up until it beats under a name of its own.`);
     };
+    const body = () => {
+      const m = deps.machine;
+      return beatBody(deps.readState(), { name: flags.name, runner: deps.runner.name }, {}, {
+        atOnce: deps.atOnce,
+        ...m?.last ? { machine: m.last } : {},
+        ...m?.hold && !m.off ? { hold: m.hold } : {}
+      });
+    };
+    const heard = (r) => {
+      sayRefused(r);
+      if (r.ok) {
+        updater.sawBeat(r.update);
+        noteBeat(r.update);
+      }
+    };
+    beforeFirstTick = async () => {
+      try {
+        heard(await postBeat(client, body()));
+      } catch {}
+    };
     afterTick = async () => {
       try {
-        const m = deps.machine;
-        send(beatBody(deps.readState(), { name: flags.name, runner: deps.runner.name }, {}, {
-          atOnce: deps.atOnce,
-          ...m?.last ? { machine: m.last } : {},
-          ...m?.hold && !m.off ? { hold: m.hold } : {}
-        }))?.then((r) => {
-          sayRefused(r);
-          if (r?.ok) {
-            updater.sawBeat(r.update);
-            noteBeat(r.update);
-          }
-          if (r && (r.ok || ("unreachable" in r)))
+        send(body())?.then((r) => {
+          if (!r)
+            return;
+          heard(r);
+          if (r.ok || "unreachable" in r)
             watch.beat();
         }, () => {});
       } catch {}
@@ -21225,7 +21346,7 @@ var engineCmd = async (o) => {
     };
   }
   try {
-    return await driveEngine2(o, flags, deps, { afterTick });
+    return await driveEngine2(o, flags, deps, { afterTick, beforeFirstTick });
   } finally {
     watch.stop();
   }
@@ -21435,7 +21556,7 @@ import {
   writeFileSync as writeFileSync21
 } from "node:fs";
 import { hostname as hostname5 } from "node:os";
-import { basename as basename7, dirname as dirname17, isAbsolute as isAbsolute4, join as join27 } from "node:path";
+import { basename as basename7, dirname as dirname19, isAbsolute as isAbsolute6, join as join27 } from "node:path";
 init_state();
 var ENGINE_LABEL2 = "ai.sleds.engine";
 var ENGINE_INSTALL_USAGE2 = `usage: sleds engine install [engine flags]   |   sleds engine uninstall [--name <n>] [--org <slug>]
@@ -21443,7 +21564,7 @@ ${ENGINE_USAGE}`;
 function stableArgv2(argv, realpath = realpathSync2, home) {
   const link = sledsLink(home);
   return argv.map((a) => {
-    if (!isAbsolute4(a) || a === link)
+    if (!isAbsolute6(a) || a === link)
       return a;
     try {
       return realpath(a);
@@ -21673,7 +21794,7 @@ function engineInstall2(o) {
   if (platform === "linux")
     return installUnit2({ o, parsed, label, sledsArgv, env: agentEnv, logPath, exec });
   const plist = enginePlistPath2(o.home, parsed.name, parsed.org, seat);
-  mkdirSync22(dirname17(plist), { recursive: true });
+  mkdirSync22(dirname19(plist), { recursive: true });
   if (existsSync22(plist))
     exec("launchctl", ["unload", plist]);
   for (const other of installedEngines2(o.home)) {
@@ -21715,7 +21836,7 @@ function installUnit2(a) {
   const unit = engineUnitPath(o.home, label);
   const unitName = basename7(unit);
   const systemctl = (...args) => exec("systemctl", ["--user", ...args]);
-  mkdirSync22(dirname17(unit), { recursive: true });
+  mkdirSync22(dirname19(unit), { recursive: true });
   if (existsSync22(unit))
     systemctl("stop", unitName);
   for (const other of installedEngines2(o.home)) {
@@ -22740,7 +22861,7 @@ init_meter();
 // src/owed.ts
 init_config();
 import { existsSync as existsSync26, mkdirSync as mkdirSync23, readFileSync as readFileSync25, renameSync as renameSync11, writeFileSync as writeFileSync22 } from "node:fs";
-import { dirname as dirname18, join as join28 } from "node:path";
+import { dirname as dirname20, join as join28 } from "node:path";
 var owedPath = (home) => join28(configDir(home), "owed.json");
 var sessionPath = (home) => join28(configDir(home), "session.json");
 var OWED_TTL_MS = 3 * 24 * 60 * 60000;
@@ -22766,7 +22887,7 @@ var readJson = (p) => {
   }
 };
 var writeJson = (p, v) => {
-  mkdirSync23(dirname18(p), { recursive: true, mode: 448 });
+  mkdirSync23(dirname20(p), { recursive: true, mode: 448 });
   const tmp = `${p}.${process.pid}.tmp`;
   writeFileSync22(tmp, `${JSON.stringify(v, null, 2)}
 `, { mode: 384 });
@@ -22900,7 +23021,7 @@ function contextFor(deps) {
     ...src,
     fetchFn: deps.fetchFn,
     timeoutMs: deps.timeoutMs,
-    version: "0.1.48"
+    version: "0.1.49"
   }), deps.home, now) : null;
   return {
     channel: "code",
@@ -24029,7 +24150,7 @@ init_meter();
 import { spawnSync as spawnSync7 } from "node:child_process";
 import { existsSync as existsSync28, mkdirSync as mkdirSync25, readFileSync as readFileSync27, rmSync as rmSync17, writeFileSync as writeFileSync24 } from "node:fs";
 import { hostname as hostname11 } from "node:os";
-import { dirname as dirname19 } from "node:path";
+import { dirname as dirname21 } from "node:path";
 var defaultWhich3 = (cmd) => {
   const path = process.env.PATH ?? "";
   for (const dir of path.split(":").filter(Boolean)) {
@@ -24067,7 +24188,7 @@ var musherInstall = (o) => {
   const plist = musherPlistPath(o.home, env);
   const label = musherLabel(env);
   const dir = configDir(o.home, env);
-  mkdirSync25(dirname19(plist), { recursive: true });
+  mkdirSync25(dirname21(plist), { recursive: true });
   mkdirSync25(dir, { recursive: true, mode: 448 });
   const execPath = o.sledsArgv[0] ?? process.execPath;
   const agentEnv = {
@@ -24505,7 +24626,7 @@ var packCmd = async (o) => {
 
 // src/commands/permissionEvent.ts
 import { chmodSync as chmodSync7, mkdirSync as mkdirSync26, readFileSync as readFileSync28, renameSync as renameSync12, rmSync as rmSync19, writeFileSync as writeFileSync26 } from "node:fs";
-import { dirname as dirname20 } from "node:path";
+import { dirname as dirname22 } from "node:path";
 var isObject13 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var messageOf = (text) => {
   try {
@@ -24529,7 +24650,7 @@ var permissionEvent = async (o) => {
     if (!isToolPermission2(message))
       return 0;
     const mark = { message, at: (o.now ?? Date.now)() };
-    mkdirSync26(dirname20(o.mark), { recursive: true, mode: 448 });
+    mkdirSync26(dirname22(o.mark), { recursive: true, mode: 448 });
     const tmp = `${o.mark}.${process.pid}.tmp`;
     writeFileSync26(tmp, `${JSON.stringify(mark)}
 `, { mode: 384 });
@@ -25569,11 +25690,81 @@ var seatEvent = async (o) => {
   return 0;
 };
 
+// src/commands/seatRevoke.ts
+var SEAT_REVOKE_USAGE = "usage: sleds seat revoke [--box <name>] [--yes] [--json]";
+var LAG = "a proxy may honour it for up to 60 s more";
+function parseSeatRevokeArgs(argv) {
+  let box = null;
+  let yes = false;
+  let json = false;
+  for (let i = 0;i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "--json")
+      json = true;
+    else if (a === "--yes" || a === "-y")
+      yes = true;
+    else if (a === "--box") {
+      const value = argv[i + 1]?.trim();
+      if (!value || value.startsWith("--"))
+        return { error: "--box needs the box's name" };
+      box = value.replace(/^box:/, "");
+      i++;
+    } else
+      return { error: `unknown argument ${a}` };
+  }
+  return { box, yes, json };
+}
+function why(j, status) {
+  if (typeof j?.reason === "string")
+    return j.reason;
+  if (typeof j?.error === "string")
+    return j.error;
+  const e = j?.error;
+  return typeof e?.message === "string" ? e.message : `HTTP ${status}`;
+}
+async function seatRevokeCmd(o) {
+  const log = o.log ?? console.log;
+  const error = o.error ?? console.error;
+  const a = parseSeatRevokeArgs(o.argv);
+  if ("error" in a) {
+    error(a.error);
+    error(SEAT_REVOKE_USAGE);
+    return 2;
+  }
+  if (!a.box && !a.yes) {
+    error("this revokes this machine's own seat — SLEDS stops here until `sleds init` again.");
+    error("Add --yes to go ahead, or --box <name> to revoke one of your boxes instead.");
+    return 2;
+  }
+  const client = engineClient({ home: o.home, ...o.client ? { client: o.client } : {} });
+  if ("error" in client) {
+    error(client.error);
+    return 1;
+  }
+  const r = await client.postFull("/proxy/seat/revoke", a.box ? { box: a.box } : {});
+  if (!r) {
+    error("SLEDS unreachable — nothing revoked");
+    return 1;
+  }
+  const ok = r.status < 300 && r.json?.ok !== false;
+  if (a.json) {
+    log(JSON.stringify({ v: 1, ...r.json ?? { ok: false, reason: `HTTP ${r.status}` } }));
+    return ok ? 0 : 1;
+  }
+  if (!ok) {
+    error(clean(`nothing revoked — ${why(r.json, r.status)}`));
+    return 1;
+  }
+  const label = typeof r.json?.label === "string" ? r.json.label : a.box ? `box:${a.box}` : "";
+  log(clean(a.box ? `${label} revoked — its token is dead; ${LAG}` : `this machine's seat${label ? ` (${label})` : ""} revoked — its token is dead; ${LAG}. Run \`sleds init\` with a new one to use SLEDS here again`));
+  return 0;
+}
+
 // src/commands/seatSync.ts
 import { execFileSync as execFileSync5 } from "node:child_process";
 import { existsSync as existsSync30, mkdirSync as mkdirSync27, readFileSync as readFileSync30, readdirSync as readdirSync7, rmSync as rmSync21, writeFileSync as writeFileSync27 } from "node:fs";
 import { platform as platform2 } from "node:os";
-import { dirname as dirname21, join as join31 } from "node:path";
+import { dirname as dirname23, join as join31 } from "node:path";
 
 // src/cookieDb.ts
 import { copyFileSync as copyFileSync3, rmSync as rmSync20 } from "node:fs";
@@ -26007,7 +26198,7 @@ function install(home, argv, source, log, launchctl) {
   const tokenPath = seatTokenPath(home, source);
   rmSync21(tokenPath, { force: true });
   if (source.token) {
-    mkdirSync27(dirname21(tokenPath), { recursive: true, mode: 448 });
+    mkdirSync27(dirname23(tokenPath), { recursive: true, mode: 448 });
     writeFileSync27(tokenPath, `${source.token}
 `, { mode: 384 });
   }
@@ -26184,8 +26375,8 @@ var sessionEvent = async (o) => {
 
 // src/commands/specEvent.ts
 init_meter();
-import { readFileSync as readFileSync31, statSync as statSync5 } from "node:fs";
-import { basename as basename8, isAbsolute as isAbsolute5, relative as relative2 } from "node:path";
+import { readFileSync as readFileSync31, statSync as statSync7 } from "node:fs";
+import { basename as basename8, isAbsolute as isAbsolute7, relative as relative2 } from "node:path";
 var HOOK_STDIN_TIMEOUT_MS3 = 1000;
 var ESTIMATE_TIMEOUT_MS = 4000;
 var MIN_SPEC_CHARS = 200;
@@ -26229,7 +26420,7 @@ function parseHookInput(raw) {
   return { toolName, filePath, cwd };
 }
 function projectKey(filePath, cwd) {
-  if (cwd && isAbsolute5(filePath) && isAbsolute5(cwd)) {
+  if (cwd && isAbsolute7(filePath) && isAbsolute7(cwd)) {
     const rel = relative2(cwd, filePath);
     if (rel && !rel.startsWith(".."))
       return rel;
@@ -26238,7 +26429,7 @@ function projectKey(filePath, cwd) {
 }
 function readFileOrNull(path) {
   try {
-    if (statSync5(path).size > 2000000)
+    if (statSync7(path).size > 2000000)
       return null;
     return readFileSync31(path, "utf8");
   } catch {
@@ -26850,7 +27041,7 @@ var hasEitherKey = (settings) => {
 // src/commands/update.ts
 init_server();
 import { existsSync as existsSync34 } from "node:fs";
-import { homedir as homedir7, userInfo } from "node:os";
+import { homedir as homedir7, userInfo as userInfo4 } from "node:os";
 import { basename as basename9 } from "node:path";
 init_config();
 init_state();
@@ -26916,7 +27107,7 @@ var realPidAlive4 = (pid) => {
 };
 function machineClient(home, env) {
   const src = meterSource(home, undefined, { env });
-  return src ? fetchClient({ ...src, version: "0.1.48" }) : null;
+  return src ? fetchClient({ ...src, version: "0.1.49" }) : null;
 }
 async function noteAnswer2(home, a, now) {
   try {
@@ -26963,7 +27154,7 @@ async function updateCmd(o) {
     const r = await rollBack({
       home,
       restoreState: false,
-      why: `asked by ${o.user ?? userInfo().username}`,
+      why: `asked by ${o.user ?? userInfo4().username}`,
       now: now(),
       platform
     });
@@ -27439,7 +27630,7 @@ var defaultExec5 = (cmd, args) => {
 };
 
 // src/settings.ts
-import { dirname as dirname22, join as join34, resolve as resolve12 } from "node:path";
+import { dirname as dirname24, join as join34, resolve as resolve12 } from "node:path";
 var withSeatEnv2 = (command, home, env = process.env, org) => {
   const parts = [];
   const sh = env.SLEDS_HOME?.trim();
@@ -27625,10 +27816,16 @@ commands:
               needs (gh signed in, git, tmux, its launchd agent, a repos dir). --json: {v, checks}.
               --sandbox: also run one short sandboxed Claude Code session (haiku) and prove it
               cannot read the SLEDS config dir or reach a host off the allowlist.
+              --lent-by <lender>: check this account as a lent engine's before the install \u2014
+              both homes 700 (an installed engine with --lent-by is checked without it).
   meter       Show the pipeline: built today, queued with its band, delivered overnight.
   mcp         Run the MCP server on stdio: tools usage, estimate, overnight, jobs.
               Register with \`claude mcp add sleds -- sleds mcp\` (Cowork sees the same server).
-  seat-sync   Read the seat's subscription usage (weekly/5h limits, per-model, credits) from a
+  seat revoke [--box <name>] [--yes] [--json]   Kill a seat's token in one step. --box revokes
+              your own box:<name> seat, from any terminal; without it this machine's own seat
+              is revoked (--yes, since SLEDS stops here until \`sleds init\` again). A proxy may
+              honour the token for up to 60 s more. --json: {v, ok, seatId, label} or {v, ok, reason}
+  seat-sync  Read the seat's subscription usage (weekly/5h limits, per-model, credits) from a
               claude.ai session and post it to the proxy. macOS.
               --browser <claude|chrome|brave|edge|chromium|\u2026>  which cookie store (default claude)
               --profile <name>       browser profile dir ("Profile 1") or its display name/email
@@ -27681,6 +27878,7 @@ var parseArgs = (argv) => {
   }
   return { cmd, flags };
 };
+var lentByOf = (v) => typeof v === "string" && v.trim() ? { lentBy: v.trim() } : {};
 var HELP = new Set(["help", "--help", "-h"]);
 var wantsHelp = (argv) => {
   if (HELP.has(argv[0] ?? "--help"))
@@ -27754,7 +27952,7 @@ var main = async (argv) => {
     now: Date.now(),
     stderr: (line) => console.error(line),
     isTTY: !!process.stderr.isTTY,
-    version: "0.1.48"
+    version: "0.1.49"
   });
   switch (cmd) {
     case "update":
@@ -27775,6 +27973,11 @@ var main = async (argv) => {
       return sledCmd({ home, argv: argv.slice(1) });
     case "reopen":
       return reopenCmd({ home, argv: argv.slice(1) });
+    case "seat":
+      if (argv[1] === "revoke")
+        return seatRevokeCmd({ home, argv: argv.slice(2) });
+      console.error(SEAT_REVOKE_USAGE);
+      return 2;
     case "engine":
     case "route": {
       if (cmd === "engine" && argv[1] === "status")
@@ -27957,7 +28160,8 @@ var main = async (argv) => {
       return doctor({
         home,
         json: argv.slice(1).includes("--json"),
-        sandbox: argv.slice(1).includes("--sandbox")
+        sandbox: argv.slice(1).includes("--sandbox"),
+        ...lentByOf(parseArgs(argv).flags["lent-by"])
       });
     case "status":
       return status3({ home });
@@ -27981,7 +28185,7 @@ ${renderHelpText(argv[1])}`);
     case "version":
     case "--version":
     case "-v":
-      console.log("sleds 0.1.48");
+      console.log("sleds 0.1.49");
       return 0;
     default:
       console.error(`unknown command: ${cmd}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sleds/cli",
-  "version": "0.1.48",
+  "version": "0.1.49",
   "description": "SLEDS CLI — the cost and limits of AI agent work, decided at the wall. Point Claude Code at a SLEDS proxy; estimate before you run; hold, switch model, or run overnight when you hit a limit.",
   "license": "UNLICENSED",
   "type": "module",