@synap-core/cli 1.12.2 → 1.13.1-next.20261102.ec3d166

package/dist/lib/box/provisioner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioner.js","sourceRoot":"","sources":["../../../src/lib/box/provisioner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,UAAU,EAAmB,MAAM,eAAe,CAAC;AAG5E,OAAO,EACL,cAAc,EACd,sBAAsB,GAKvB,MAAM,WAAW,CAAC;AAWnB,8EAA8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAe,EAAE,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;AAEjH;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAc,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAE/G,mGAAmG;AACnG,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAChC,2FAA2F;AAC3F,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AAEjC,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,CAAY;IACtC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;IACrB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAA2B,EAAE,CAAC;QACnE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACpE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAc,EAAE,CAAa;IACvD,IAAI,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,iBAAiB,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC,cAAc,SAAS,CAAC,CAAC,iBAAiB,KAAK,EAAE,CAAC;IACvG,CAAC;IACD,IAAI,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,iBAAiB,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,iBAAiB,GAAG,EAAE,CAAC;IAC7G,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC;QAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,cAAc,GAAG,EAAE,CAAC;IAC9G,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAiBD,MAAM,IAAI,GAA2B;IACnC,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,mEAAmE;CAC7E,CAAC;AAEF,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;AAC9E,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAmB,EAAE,IAAyB,EAAE,GAAwB;IACjG,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAClB,GAAG,CAAC,+BAA+B,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,iCAAiC,CAAC,CAAC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,SAAoB,EAAE,IAAqB;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,GAAG,GAAc,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACjF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,GAAG,IAAI,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,aAAa,GAAG,IAAI,CAAC;IAErD,IAAI,KAAK,GAAwB,OAAO,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,WAA+B,CAAC;IACpC,8FAA8F;IAC9F,MAAM,KAAK,GAAa,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxG,IAAI,IAAI,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IAEzD,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnD,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpC,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,kBAAkB,CAAC,CAAC;gBAC1C,IAAI,EAAE,CAAC;YACT,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;gBAClC,IAAI,GAAG,IAAI,CAAC;gBACZ,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC1C,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YACD,wEAAwE;YACxE,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,WAAW,KAAK,qCAAqC,CAAC;QACtD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEhD,IAAI,KAAiC,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,IAAgB,EAAE,EAAE;QAC3C,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,CAAC;QACT,CAAC,EAAE,EAAE,CAAC,CAAC;IACT,CAAC,CAAC;IAEF,MAAM,IAAI,EAAE,CAAC;IACb,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/F,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;QACnC,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;YAAE,OAAO;QAC5B,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACpB,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE;gBAChB,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,wCAAwC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC5G,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,KAAK,GAAG,SAAS,CAAC;QAClB,KAAK,IAAI,EAAE,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,EAAE,GAAG,EAAE;YAClC,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,WAAW,sCAAsC,CAAC,CAAC;QAClG,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,EAAE,GAAkB,IAAI,CAAC;IAC7B,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,MAAM,GAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAClE,IAAI,CAAC;QACH,kFAAkF;QAClF,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACnG,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;gBACf,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,GAAG,iBAAkB,GAAa,CAAC,OAAO,EAAE,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,IAAI,EAAE,EAAE,CAAC;YACP,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,SAAS,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;YAChD,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE;gBACf,WAAW,KAAK,0CAA0C,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,+BAA+B,CAAC;YACrH,CAAC,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;YAC/E,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK;gBAAE,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC;YAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBACjC,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,SAAS,IAAI,YAAY,CAAC,CAAC;oBACjD,MAAM;gBACR,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,aAAa,IAAI,YAAY,CAAC,YAAa,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,MAAM,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,IAAI,UAAU,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAEtB,MAAM,KAAK,GAAwB,EAAE,CAAC;QACtC,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,sBAAsB,EAAE,CAAC;gBAClD,0EAA0E;gBAC1E,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBACvD,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBACrH,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,cAAc;oBAAE,OAAO,IAAI,CAAC;gBAC/C,IAAI,GAAG,YAAY,sBAAsB;oBAAE,QAAQ,GAAG,KAAK,CAAC;gBAC5D,mEAAmE;gBACnE,mDAAmD;gBACnD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,2BAA4B,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAe,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAC1F,MAAM,IAAI,GAAG,cAAc,CAAC;YAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO;YACP,SAAS;YACT,UAAU,EAAE,GAAG,EAAE;YACjB,GAAG;YACH,aAAa,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE;YACjC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,cAAc,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,oBAAqB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,IAAI,GAAG,YAAY,cAAc;gBAAE,OAAO,IAAI,CAAC;YAC/C,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,EAAE;YAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAaD,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAE9E,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAqB,EAAE,IAAkB;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IACtC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACtE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;oBAAE,IAAI,CAAC,GAAG,CAAC,uBAAuB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/E,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC;gBACxB,IAAI,IAAI,CAAC,IAAI;oBAAE,OAAO;gBACtB,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,QAAQ,GAAG,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACnC,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAC9E,MAAM,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBACpD,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO;YACtB,IAAI,CAAC,GAAG;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,UAAW,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM,GAAG,CAAC;YACzB,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/lib/box/proxmox.d.ts

@@ -0,0 +1,112 @@
+/**
+ * The Proxmox backend of the run box: one fresh unprivileged LXC per run,
+ * linked-cloned from a template CT, on the isolated box bridge, destroyed after.
+ *
+ * It talks to the Proxmox API with a POOL-SCOPED token (least privilege: it
+ * can clone, configure, start, stop and destroy guests of ONE pool, and read
+ * node memory, one storage's fill and the thin pools' fill — nothing else;
+ * host side in `my server` docs/RUNBOX.md, `scripts/box/setup-box-access.sh`). TLS is verified against the host's own CA, pinned by file,
+ * never `rejectUnauthorized: false`.
+ */
+export interface ProxmoxConfig {
+    /** e.g. https://10.10.0.1:8006 */
+    endpoint: string;
+    /** `user@realm!tokenid=secret` */
+    token: string;
+    /** PEM of the host CA (/etc/pve/pve-root-ca.pem). */
+    ca: string;
+    node: string;
+    /**
+     * The name the host certificate is checked against when the endpoint is an
+     * address it does not list. The founder's host cert names 192.168.1.201,
+     * `main` and `main.local.lan`, not 10.10.0.1 (read 2026-10-26), so the
+     * provisioner connects to 10.10.0.1 and verifies the cert as `main`.
+     */
+    serverName?: string;
+}
+export interface ProxmoxApi {
+    get<T>(path: string): Promise<T>;
+    post<T>(path: string, params?: Record<string, string | number>): Promise<T>;
+    put<T>(path: string, params?: Record<string, string | number>): Promise<T>;
+    del<T>(path: string, params?: Record<string, string | number>): Promise<T>;
+}
+export declare class ProxmoxError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
+export declare function createProxmoxApi(cfg: ProxmoxConfig): ProxmoxApi;
+export interface BoxHostConfig {
+    /** VMID of the template CT (a Proxmox template, linked clones only). */
+    templateVmid: number;
+    /** The pool every box is created in; the token can touch nothing else. */
+    pool: string;
+    /** Storage the template and its linked clones live on (the fill guard reads it). */
+    storage: string;
+    /**
+     * The LVM thin pool behind `storage`, `vg/lv` (e.g. `pve/data`), for the
+     * metadata guard. Unset = no metadata guard (said once at start).
+     */
+    thinpool?: string;
+    /** The isolated box bridge. */
+    bridge: string;
+    /** First three octets of the box subnet, e.g. "10.20.0". */
+    subnetPrefix: string;
+    /** VMIDs reserved for boxes, inclusive. */
+    vmidMin: number;
+    vmidMax: number;
+    cpuunits: number;
+}
+/** Every box carries this tag; the reaper touches nothing without it. */
+export declare const BOX_TAG = "synap-box";
+export interface BoxHandle {
+    vmid: number;
+    ip: string;
+}
+export interface HostReading {
+    memAvailableMb: number;
+    storageUsedPct: number;
+    /** Thin pool metadata fill; null only when no `thinpool` is configured (never for a failed read: that throws). */
+    metaUsedPct: number | null;
+}
+export interface ListedBox {
+    vmid: number;
+    name: string;
+}
+export interface BoxBackend {
+    readHost(): Promise<HostReading>;
+    /** Clone, size, attach to the bridge and start a box for one run. */
+    create(runId: string, limits: {
+        cpus: number;
+        memoryMb: number;
+    }): Promise<BoxHandle>;
+    /** Stop and destroy; idempotent (a box already gone is success). */
+    destroy(vmid: number): Promise<void>;
+    /** Every tagged box in the pool (the reaper destroys those no run holds). */
+    list(): Promise<ListedBox[]>;
+}
+/** The IP a box gets on the bridge, by its VMID slot (.10 upward). */
+export declare function boxIpFor(cfg: BoxHostConfig, vmid: number): string;
+type ClusterGuest = {
+    vmid?: number;
+    type?: string;
+    name?: string;
+    pool?: string;
+    tags?: string;
+    template?: number;
+};
+/**
+ * The boxes the reaper may destroy: guests of the box pool, in the box VMID
+ * range, tagged `synap-box`, never the template. Read from /cluster/resources
+ * (VM.Audit + Pool.Audit on the pool), not the deprecated GET /pools/{id}.
+ */
+export declare function boxesOf(cfg: BoxHostConfig, guests: readonly ClusterGuest[]): ListedBox[];
+type ThinPool = {
+    lv: string;
+    vg: string;
+    metadata_size: number;
+    metadata_used: number;
+};
+/** Metadata fill of `vg/lv`; throws when the pool is not listed (a missing reading is never "fine"). */
+export declare function thinMetaPct(spec: string, pools: readonly ThinPool[]): number;
+export declare function createProxmoxBackend(api: ProxmoxApi, node: string, cfg: BoxHostConfig): BoxBackend;
+export {};

package/dist/lib/box/proxmox.js

@@ -0,0 +1,211 @@
+/**
+ * The Proxmox backend of the run box: one fresh unprivileged LXC per run,
+ * linked-cloned from a template CT, on the isolated box bridge, destroyed after.
+ *
+ * It talks to the Proxmox API with a POOL-SCOPED token (least privilege: it
+ * can clone, configure, start, stop and destroy guests of ONE pool, and read
+ * node memory, one storage's fill and the thin pools' fill — nothing else;
+ * host side in `my server` docs/RUNBOX.md, `scripts/box/setup-box-access.sh`). TLS is verified against the host's own CA, pinned by file,
+ * never `rejectUnauthorized: false`.
+ */
+import https from "node:https";
+export class ProxmoxError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = "ProxmoxError";
+    }
+}
+export function createProxmoxApi(cfg) {
+    const base = new URL("/api2/json", cfg.endpoint);
+    const agent = new https.Agent({ ca: cfg.ca, keepAlive: true, ...(cfg.serverName ? { servername: cfg.serverName } : {}) });
+    function request(method, path, params) {
+        const url = new URL(base.pathname + path, base);
+        let body;
+        const form = params
+            ? new URLSearchParams(Object.entries(params).map(([k, v]) => [k, String(v)])).toString()
+            : "";
+        if (method === "GET" || method === "DELETE") {
+            if (form)
+                url.search = form;
+        }
+        else {
+            body = form;
+        }
+        return new Promise((resolve, reject) => {
+            const req = https.request(url, {
+                method,
+                agent,
+                headers: {
+                    Authorization: `PVEAPIToken=${cfg.token}`,
+                    ...(body !== undefined
+                        ? { "Content-Type": "application/x-www-form-urlencoded", "Content-Length": Buffer.byteLength(body) }
+                        : {}),
+                },
+                timeout: 30_000,
+            }, (res) => {
+                const chunks = [];
+                res.on("data", (c) => chunks.push(c));
+                res.on("end", () => {
+                    const text = Buffer.concat(chunks).toString("utf8");
+                    if ((res.statusCode ?? 500) >= 400) {
+                        reject(new ProxmoxError(res.statusCode ?? 500, `${method} ${path}: HTTP ${res.statusCode} ${res.statusMessage ?? ""} ${text.slice(0, 300)}`.trim()));
+                        return;
+                    }
+                    try {
+                        resolve(JSON.parse(text).data);
+                    }
+                    catch {
+                        reject(new ProxmoxError(res.statusCode ?? 500, `${method} ${path}: not JSON`));
+                    }
+                });
+            });
+            req.on("timeout", () => req.destroy(new Error(`${method} ${path}: timed out`)));
+            req.on("error", reject);
+            if (body !== undefined)
+                req.write(body);
+            req.end();
+        });
+    }
+    return {
+        get: (p) => request("GET", p),
+        post: (p, params) => request("POST", p, params),
+        put: (p, params) => request("PUT", p, params),
+        del: (p, params) => request("DELETE", p, params),
+    };
+}
+/** Every box carries this tag; the reaper touches nothing without it. */
+export const BOX_TAG = "synap-box";
+/** The IP a box gets on the bridge, by its VMID slot (.10 upward). */
+export function boxIpFor(cfg, vmid) {
+    return `${cfg.subnetPrefix}.${10 + (vmid - cfg.vmidMin)}`;
+}
+/**
+ * The boxes the reaper may destroy: guests of the box pool, in the box VMID
+ * range, tagged `synap-box`, never the template. Read from /cluster/resources
+ * (VM.Audit + Pool.Audit on the pool), not the deprecated GET /pools/{id}.
+ */
+export function boxesOf(cfg, guests) {
+    return guests
+        .filter((g) => g.type === "lxc" && typeof g.vmid === "number" && g.pool === cfg.pool)
+        .filter((g) => g.vmid !== cfg.templateVmid && !g.template)
+        .filter((g) => g.vmid >= cfg.vmidMin && g.vmid <= cfg.vmidMax)
+        .filter((g) => (g.tags ?? "").split(/[;, ]/).includes(BOX_TAG))
+        .map((g) => ({ vmid: g.vmid, name: g.name ?? "" }));
+}
+/** Metadata fill of `vg/lv`; throws when the pool is not listed (a missing reading is never "fine"). */
+export function thinMetaPct(spec, pools) {
+    const [vg, lv] = spec.split("/");
+    const p = pools.find((t) => t.vg === vg && t.lv === lv);
+    if (!p)
+        throw new Error(`thin pool ${spec} not found on the node`);
+    return p.metadata_size > 0 ? (p.metadata_used / p.metadata_size) * 100 : 100;
+}
+export function createProxmoxBackend(api, node, cfg) {
+    const n = encodeURIComponent(node);
+    async function waitTask(upid, timeoutMs = 120_000) {
+        const deadline = Date.now() + timeoutMs;
+        for (;;) {
+            const t = await api.get(`/nodes/${n}/tasks/${encodeURIComponent(upid)}/status`);
+            if (t.status === "stopped") {
+                if (t.exitstatus !== "OK")
+                    throw new ProxmoxError(500, `task ${upid} ended: ${t.exitstatus}`);
+                return;
+            }
+            if (Date.now() > deadline)
+                throw new ProxmoxError(504, `task ${upid} still running after ${timeoutMs} ms`);
+            await new Promise((r) => setTimeout(r, 1000));
+        }
+    }
+    /**
+     * The first VMID of the box range that is free cluster-wide. /cluster/resources
+     * shows only the guests this token may audit (the pool), so each candidate is
+     * confirmed by /cluster/nextid?vmid=N, which checks every guest.
+     */
+    async function freeVmid() {
+        const seen = new Set((await api.get(`/cluster/resources?type=vm`)).map((g) => g.vmid).filter((v) => typeof v === "number"));
+        for (let id = cfg.vmidMin; id <= cfg.vmidMax; id++) {
+            if (seen.has(id))
+                continue;
+            try {
+                await api.get(`/cluster/nextid?vmid=${id}`);
+                return id;
+            }
+            catch (err) {
+                if (err instanceof ProxmoxError && err.status === 400)
+                    continue; // "VM <id> already exists"
+                throw err;
+            }
+        }
+        return null;
+    }
+    async function destroy(vmid) {
+        try {
+            const st = await api.get(`/nodes/${n}/lxc/${vmid}/status/current`);
+            if (st.status === "running") {
+                await waitTask(await api.post(`/nodes/${n}/lxc/${vmid}/status/stop`));
+            }
+            await waitTask(await api.del(`/nodes/${n}/lxc/${vmid}`, { purge: 1, "destroy-unreferenced-disks": 1 }));
+        }
+        catch (err) {
+            // A box already gone is the outcome we want.
+            if (err instanceof ProxmoxError && (err.status === 404 || /does not exist/.test(err.message)))
+                return;
+            throw err;
+        }
+    }
+    return {
+        async readHost() {
+            // `memory.free` here is MemFree; total - used is MemAvailable (read on
+            // the host 2026-10-26: within 1% of /proc/meminfo MemAvailable).
+            const status = await api.get(`/nodes/${n}/status`);
+            const st = await api.get(`/nodes/${n}/storage/${encodeURIComponent(cfg.storage)}/status`);
+            const metaUsedPct = cfg.thinpool
+                ? thinMetaPct(cfg.thinpool, await api.get(`/nodes/${n}/disks/lvmthin`))
+                : null;
+            return {
+                memAvailableMb: Math.floor((status.memory.total - status.memory.used) / 1024 / 1024),
+                storageUsedPct: st.total > 0 ? (st.used / st.total) * 100 : 100,
+                metaUsedPct,
+            };
+        },
+        async create(runId, limits) {
+            const vmid = await freeVmid();
+            if (vmid === null)
+                throw new ProxmoxError(503, `no free VMID in ${cfg.vmidMin}-${cfg.vmidMax}`);
+            const ip = boxIpFor(cfg, vmid);
+            const upid = await api.post(`/nodes/${n}/lxc/${cfg.templateVmid}/clone`, {
+                newid: vmid,
+                hostname: `box-${runId.slice(0, 8)}`,
+                pool: cfg.pool,
+                full: 0,
+                description: `synap box run ${runId}`,
+            });
+            await waitTask(upid);
+            try {
+                await api.put(`/nodes/${n}/lxc/${vmid}/config`, {
+                    cores: limits.cpus,
+                    memory: limits.memoryMb,
+                    swap: 0,
+                    cpuunits: cfg.cpuunits,
+                    // No gateway: the box's only reachable neighbour is the provisioner.
+                    net0: `name=eth0,bridge=${cfg.bridge},ip=${ip}/24,firewall=0`,
+                    tags: `${BOX_TAG};run-${runId.slice(0, 8)}`,
+                    onboot: 0,
+                });
+                await waitTask(await api.post(`/nodes/${n}/lxc/${vmid}/status/start`));
+            }
+            catch (err) {
+                await destroy(vmid).catch(() => undefined);
+                throw err;
+            }
+            return { vmid, ip };
+        },
+        destroy,
+        async list() {
+            return boxesOf(cfg, await api.get(`/cluster/resources?type=vm`));
+        },
+    };
+}
+//# sourceMappingURL=proxmox.js.map

package/dist/lib/box/proxmox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxmox.js","sourceRoot":"","sources":["../../../src/lib/box/proxmox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,MAAM,YAAY,CAAC;AA0B/B,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B;IADX,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;QAIvB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAkB;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAE1H,SAAS,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,MAAwC;QACxF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,IAAwB,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM;YACjB,CAAC,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACxF,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CACvB,GAAG,EACH;gBACE,MAAM;gBACN,KAAK;gBACL,OAAO,EAAE;oBACP,aAAa,EAAE,eAAe,GAAG,CAAC,KAAK,EAAE;oBACzC,GAAG,CAAC,IAAI,KAAK,SAAS;wBACpB,CAAC,CAAC,EAAE,cAAc,EAAE,mCAAmC,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;wBACpG,CAAC,CAAC,EAAE,CAAC;iBACR;gBACD,OAAO,EAAE,MAAM;aAChB,EACD,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACpD,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;wBACnC,MAAM,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,GAAG,MAAM,IAAI,IAAI,UAAU,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,aAAa,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;wBACrJ,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC;wBACH,OAAO,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC,IAAI,CAAC,CAAC;oBAClD,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,GAAG,MAAM,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC;oBACjF,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CACF,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;YAChF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,IAAI,IAAI,KAAK,SAAS;gBAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7B,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC;QAC/C,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC;QAC7C,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC;KACjD,CAAC;AACJ,CAAC;AA0BD,yEAAyE;AACzE,MAAM,CAAC,MAAM,OAAO,GAAG,WAAW,CAAC;AA6BnC,sEAAsE;AACtE,MAAM,UAAU,QAAQ,CAAC,GAAkB,EAAE,IAAY;IACvD,OAAO,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5D,CAAC;AAID;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,GAAkB,EAAE,MAA+B;IACzE,OAAO,MAAM;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC;SACpF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;SACzD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAK,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,IAAK,IAAI,GAAG,CAAC,OAAO,CAAC;SAC/D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAC9D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AAID,wGAAwG;AACxG,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAA0B;IAClE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,wBAAwB,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAC/E,CAAC;AAID,MAAM,UAAU,oBAAoB,CAAC,GAAe,EAAE,IAAY,EAAE,GAAkB;IACpF,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAEnC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,SAAS,GAAG,OAAO;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,SAAS,CAAC;YACR,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CAAO,UAAU,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtF,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI;oBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,QAAQ,IAAI,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC9F,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;gBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,QAAQ,IAAI,wBAAwB,SAAS,KAAK,CAAC,CAAC;YAC3G,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,QAAQ;QACrB,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,CAAC,MAAM,GAAG,CAAC,GAAG,CAAiB,4BAA4B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CACnI,CAAC;QACF,KAAK,IAAI,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC3B,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;gBAC5C,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBAAE,SAAS,CAAC,2BAA2B;gBAC5F,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,IAAY;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAqB,UAAU,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAC;YACvF,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAS,UAAU,CAAC,QAAQ,IAAI,cAAc,CAAC,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,QAAQ,CAAC,MAAM,GAAG,CAAC,GAAG,CAAS,UAAU,CAAC,QAAQ,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,4BAA4B,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAClH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6CAA6C;YAC7C,IAAI,GAAG,YAAY,YAAY,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAAE,OAAO;YACtG,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,QAAQ;YACZ,uEAAuE;YACvE,iEAAiE;YACjE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAA8C,UAAU,CAAC,SAAS,CAAC,CAAC;YAChG,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CACtB,UAAU,CAAC,YAAY,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAChE,CAAC;YACF,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ;gBAC9B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,CAAC,GAAG,CAAa,UAAU,CAAC,gBAAgB,CAAC,CAAC;gBACnF,CAAC,CAAC,IAAI,CAAC;YACT,OAAO;gBACL,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;gBACpF,cAAc,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG;gBAC/D,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM;YACxB,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;YAC9B,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,mBAAmB,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAChG,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAS,UAAU,CAAC,QAAQ,GAAG,CAAC,YAAY,QAAQ,EAAE;gBAC/E,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBACpC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,CAAC;gBACP,WAAW,EAAE,iBAAiB,KAAK,EAAE;aACtC,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,IAAI,SAAS,EAAE;oBAC9C,KAAK,EAAE,MAAM,CAAC,IAAI;oBAClB,MAAM,EAAE,MAAM,CAAC,QAAQ;oBACvB,IAAI,EAAE,CAAC;oBACP,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,qEAAqE;oBACrE,IAAI,EAAE,oBAAoB,GAAG,CAAC,MAAM,OAAO,EAAE,gBAAgB;oBAC7D,IAAI,EAAE,GAAG,OAAO,QAAQ,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;oBAC3C,MAAM,EAAE,CAAC;iBACV,CAAC,CAAC;gBACH,MAAM,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAS,UAAU,CAAC,QAAQ,IAAI,eAAe,CAAC,CAAC,CAAC;YACjF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtB,CAAC;QAED,OAAO;QAEP,KAAK,CAAC,IAAI;YACR,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,CAAiB,4BAA4B,CAAC,CAAC,CAAC;QACnF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/box/wire.d.ts

@@ -0,0 +1,98 @@
+/**
+ * The pod side of a box run, as the provisioner sees it: lease, heartbeat,
+ * upload, finish. ONE module, so the wire shape lives in one place. Contract:
+ * lanes/code-runtime/BOX-CONTRACT.md v2 (2026-10-26, owned by the pod lane),
+ * Hub routes `/api/hub/box-runs/*`.
+ *
+ * Every call carries the COMPUTER's own key (device flow, scope `box.runner`):
+ * the provisioner is a computer that pulls runs, never an agent.
+ */
+import type { HubConfig } from "../hub-client.js";
+import type { BlockedEgress } from "./egress.js";
+import type { InstalledPackage, RunLog } from "./evidence.js";
+export type BoxLanguage = "python" | "node";
+export interface BoxLimits {
+    wallSeconds: number;
+    cpus: number;
+    memoryMb: number;
+    diskMb: number;
+    outMb: number;
+}
+export interface BoxScript {
+    skillId: string;
+    name: string;
+    language: BoxLanguage;
+    entrypoint: string;
+    code: string;
+    packages: Array<{
+        name: string;
+        version: string;
+    }>;
+    /** Run-phase egress allowlist: host names, optionally `host:port`. */
+    hosts: string[];
+    limits: BoxLimits;
+}
+export interface LeasedRun {
+    id: string;
+    leaseId: string;
+    leaseExpiresAt: string;
+    heartbeatIntervalSeconds: number;
+    script: BoxScript;
+    parameters: unknown;
+    queuedAt: string;
+    attempt: number;
+}
+export interface HeartbeatReply {
+    leaseExpiresAt: string;
+    stopRequested: boolean;
+}
+export interface UploadTicket {
+    uploadUrl: string;
+    method: string;
+    headers: Record<string, string>;
+    uploadToken: string;
+    expiresAt: string;
+    maxBytes: number;
+}
+/** BOX-CONTRACT v2: timeout and infra are stored as failed with the verdict kept. */
+export type FinishStatus = "done" | "failed" | "stopped" | "timeout" | "infra";
+export interface FinishedFile {
+    path: string;
+    size: number;
+    sha256: string;
+    /** Absent when the file could not be uploaded: it is recorded in the evidence only. */
+    uploadToken?: string;
+    title?: string;
+}
+export interface FinishBody {
+    leaseId: string;
+    status: FinishStatus;
+    exitCode: number | null;
+    durationMs: number;
+    /** Required when status = infra. */
+    infraReason?: string;
+    log: RunLog;
+    files: FinishedFile[];
+    blockedEgress: BlockedEgress[];
+    installedPackages: InstalledPackage[];
+}
+/** 404 / 409: the pod no longer holds this lease for us. Stop, destroy, never finish. */
+export declare class LeaseLostError extends Error {
+    constructor(runId: string, status: number);
+}
+/** The run has no workspace: its files cannot be stored (record them `stored: false`). */
+export declare class WorkspaceRequiredError extends Error {
+    constructor();
+}
+export interface BoxHub {
+    lease(): Promise<LeasedRun | null>;
+    heartbeat(run: LeasedRun, phase: "setup" | "running"): Promise<HeartbeatReply>;
+    upload(run: LeasedRun, file: {
+        filename: string;
+        mimeType: string;
+        bytes: Buffer;
+    }): Promise<string>;
+    finish(run: LeasedRun, body: FinishBody): Promise<unknown>;
+}
+export type FetchLike = (url: string, init: RequestInit) => Promise<Response>;
+export declare function createBoxHub(cfg: Pick<HubConfig, "podUrl" | "apiKey">, fetchImpl?: FetchLike): BoxHub;

package/dist/lib/box/wire.js

@@ -0,0 +1,70 @@
+/**
+ * The pod side of a box run, as the provisioner sees it: lease, heartbeat,
+ * upload, finish. ONE module, so the wire shape lives in one place. Contract:
+ * lanes/code-runtime/BOX-CONTRACT.md v2 (2026-10-26, owned by the pod lane),
+ * Hub routes `/api/hub/box-runs/*`.
+ *
+ * Every call carries the COMPUTER's own key (device flow, scope `box.runner`):
+ * the provisioner is a computer that pulls runs, never an agent.
+ */
+/** 404 / 409: the pod no longer holds this lease for us. Stop, destroy, never finish. */
+export class LeaseLostError extends Error {
+    constructor(runId, status) {
+        super(`lease on box run ${runId} lost (HTTP ${status})`);
+        this.name = "LeaseLostError";
+    }
+}
+/** The run has no workspace: its files cannot be stored (record them `stored: false`). */
+export class WorkspaceRequiredError extends Error {
+    constructor() {
+        super("the run has no workspace: its files cannot be stored");
+        this.name = "WorkspaceRequiredError";
+    }
+}
+export function createBoxHub(cfg, fetchImpl = fetch) {
+    const base = `${cfg.podUrl.replace(/\/+$/, "")}/api/hub/box-runs`;
+    async function post(path, body, runId) {
+        const res = await fetchImpl(`${base}${path}`, {
+            method: "POST",
+            headers: { Authorization: `Bearer ${cfg.apiKey}`, "Content-Type": "application/json" },
+            body: JSON.stringify(body),
+            signal: AbortSignal.timeout(30_000),
+        });
+        if (runId && (res.status === 404 || res.status === 409))
+            throw new LeaseLostError(runId, res.status);
+        if (!res.ok) {
+            const text = await res.text().catch(() => "");
+            if (res.status === 400 && /WORKSPACE_REQUIRED/.test(text))
+                throw new WorkspaceRequiredError();
+            throw new Error(`POST box-runs${path} failed (HTTP ${res.status})${text ? `: ${text.slice(0, 300)}` : ""}`);
+        }
+        return res.json();
+    }
+    const runPath = (run, verb) => `/${encodeURIComponent(run.id)}/${verb}`;
+    return {
+        async lease() {
+            const body = (await post("/lease", {}));
+            return body.run ?? null;
+        },
+        async heartbeat(run, phase) {
+            return (await post(runPath(run, "heartbeat"), { leaseId: run.leaseId, phase }, run.id));
+        },
+        async upload(run, file) {
+            const ticket = (await post(runPath(run, "uploads"), { leaseId: run.leaseId, filename: file.filename, mimeType: file.mimeType, size: file.bytes.length }, run.id));
+            // Straight to object storage with exactly the headers the pod signed.
+            const put = await fetchImpl(ticket.uploadUrl, {
+                method: ticket.method || "PUT",
+                headers: ticket.headers,
+                body: new Uint8Array(file.bytes),
+                signal: AbortSignal.timeout(10 * 60_000),
+            });
+            if (!put.ok)
+                throw new Error(`storing ${file.filename} failed (HTTP ${put.status})`);
+            return ticket.uploadToken;
+        },
+        async finish(run, body) {
+            return post(runPath(run, "finish"), body, run.id);
+        },
+    };
+}
+//# sourceMappingURL=wire.js.map

package/dist/lib/box/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../../src/lib/box/wire.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA8EH,yFAAyF;AACzF,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,KAAa,EAAE,MAAc;QACvC,KAAK,CAAC,oBAAoB,KAAK,eAAe,MAAM,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,0FAA0F;AAC1F,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C;QACE,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAWD,MAAM,UAAU,YAAY,CAAC,GAAyC,EAAE,YAAuB,KAAK;IAClG,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC;IAElE,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,IAAa,EAAE,KAAc;QAC7D,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACtF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACrG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,sBAAsB,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,iBAAiB,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAc,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAE3F,OAAO;QACL,KAAK,CAAC,KAAK;YACT,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAA+B,CAAC;YACtE,OAAO,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK;YACxB,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAmB,CAAC;QAC5G,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI;YACpB,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CACxB,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EACvB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EACnG,GAAG,CAAC,EAAE,CACP,CAAiB,CAAC;YACnB,sEAAsE;YACtE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE;gBAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK;gBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;gBAChC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC;aACzC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,QAAQ,iBAAiB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACrF,OAAO,MAAM,CAAC,WAAW,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI;YACpB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/bridge-invocation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/lib/bridge-invocation.test.js

@@ -0,0 +1,75 @@
+/**
+ * Which CLI the claude-code MCP bridge entry names (`resolveBridgeInvocation`).
+ * On 2026-11-02 `~/.claude.json` named `node …/synap-cli/dist/index.js mcp
+ * bridge`: the global `synap` was an `npm link` of a checkout, and the
+ * registration wrote the link's RESOLVED target, so installing a release never
+ * reached the bridge. These rows build each install shape on disk and pin what
+ * gets registered: the bin npm installed, never what it resolves to.
+ */
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { bridgeInvocationNote, resolveBridgeInvocation } from "./targets.js";
+const NODE = "/usr/local/bin/node";
+let tmp;
+function file(p) {
+    fs.mkdirSync(path.dirname(p), { recursive: true });
+    fs.writeFileSync(p, "#!/usr/bin/env node\n");
+    return p;
+}
+function link(target, at) {
+    fs.mkdirSync(path.dirname(at), { recursive: true });
+    fs.symlinkSync(target, at);
+    return at;
+}
+/** `npm i -g @synap-core/cli` under `<tmp>/prefix`: the package dir plus its bin link. */
+function globalInstall() {
+    const entry = file(path.join(tmp, "prefix", "lib", "node_modules", "@synap-core", "cli", "dist", "index.js"));
+    const bin = link("../lib/node_modules/@synap-core/cli/dist/index.js", path.join(tmp, "prefix", "bin", "synap"));
+    return { bin, entry };
+}
+beforeEach(() => {
+    tmp = fs.mkdtempSync(path.join(os.tmpdir(), "synap-bridge-inv-"));
+});
+afterEach(() => {
+    fs.rmSync(tmp, { recursive: true, force: true });
+});
+describe("resolveBridgeInvocation", () => {
+    it("an npm install run from its bin registers the bin, not the resolved dist path", () => {
+        const { bin } = globalInstall();
+        const inv = resolveBridgeInvocation(bin, NODE);
+        expect(inv.kind).toBe("installed");
+        expect(inv.command).toEqual([NODE, bin]);
+        expect(bridgeInvocationNote(inv)).toBeNull();
+    });
+    it("an npm install run through its package path still registers the bin next to it", () => {
+        const { bin, entry } = globalInstall();
+        const inv = resolveBridgeInvocation(entry, NODE);
+        expect(inv.kind).toBe("installed");
+        expect(inv.command).toEqual([NODE, bin]);
+    });
+    it("a global install that links a checkout registers the bin, and says it is a checkout", () => {
+        const checkoutEntry = file(path.join(tmp, "checkout", "synap-cli", "dist", "index.js"));
+        link(path.join(tmp, "checkout", "synap-cli"), path.join(tmp, "prefix", "lib", "node_modules", "@synap-core", "cli"));
+        const bin = link("../lib/node_modules/@synap-core/cli/dist/index.js", path.join(tmp, "prefix", "bin", "synap"));
+        const inv = resolveBridgeInvocation(bin, NODE);
+        expect(inv.kind).toBe("linked");
+        expect(inv.command).toEqual([NODE, bin]);
+        const note = bridgeInvocationNote(inv) ?? "";
+        expect(note).toContain(fs.realpathSync(checkoutEntry));
+        expect(note).toContain("npm install -g @synap-core/cli@next");
+    });
+    it("a checkout build run directly is kept, and said", () => {
+        const entry = file(path.join(tmp, "checkout", "synap-cli", "dist", "index.js"));
+        const inv = resolveBridgeInvocation(entry, NODE);
+        expect(inv.kind).toBe("checkout");
+        expect(inv.command).toEqual([NODE, fs.realpathSync(entry)]);
+        expect(bridgeInvocationNote(inv)).toContain("checkout build");
+    });
+    it("a throwaway npx copy falls back to the synap on PATH", () => {
+        const entry = file(path.join(tmp, "_npx", "abc", "node_modules", "@synap-core", "cli", "dist", "index.js"));
+        expect(resolveBridgeInvocation(entry, NODE)).toEqual({ kind: "npx", command: ["synap"] });
+    });
+});
+//# sourceMappingURL=bridge-invocation.test.js.map

package/dist/lib/bridge-invocation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-invocation.test.js","sourceRoot":"","sources":["../../src/lib/bridge-invocation.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAE7E,MAAM,IAAI,GAAG,qBAAqB,CAAC;AACnC,IAAI,GAAW,CAAC;AAEhB,SAAS,IAAI,CAAC,CAAS;IACrB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,EAAU;IACtC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,0FAA0F;AAC1F,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAC9G,MAAM,GAAG,GAAG,IAAI,CAAC,mDAAmD,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAChH,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,aAAa,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;QACrH,MAAM,GAAG,GAAG,IAAI,CAAC,mDAAmD,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QAChH,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QAChF,MAAM,GAAG,GAAG,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QAC5G,MAAM,CAAC,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}