@zixt/host 0.0.4 → 0.0.6

package/dist/index.js

@@ -12,8 +12,8 @@ import { fstatSync } from "node:fs";
 
 // src/supervisor.ts
 import { spawn as spawn2 } from "node:child_process";
-import { access as access2 } from "node:fs/promises";
-import { join as join3 } from "node:path";
+import { access as access2, readdir, rm } from "node:fs/promises";
+import { join as join3, resolve as resolve2, sep } from "node:path";
 import { homedir } from "node:os";
 
 // src/client.ts
@@ -22,7 +22,7 @@ import WebSocket from "ws";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.4",
+  version: "0.0.6",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -15053,6 +15053,7 @@ var ConnectionAccess = external_exports.discriminatedUnion("mode", [
     connectionIds: external_exports.array(ConnectionId).max(MAX_CUSTOM_CONNECTION_IDS).refine((items) => new Set(items).size === items.length, "duplicate Integration")
   }).strict()
 ]);
+var DEFAULT_HOST_GATEWAY_URL = "wss://api.zixt.ai/gateway";
 var DEFAULT_CONNECTION_ACCESS = { mode: "all" };
 var MAX_CUSTOM_MACHINE_IDS = 100;
 var MachineAccess = external_exports.discriminatedUnion("mode", [
@@ -15439,7 +15440,13 @@ var HostProjection = external_exports.discriminatedUnion("telemetryRedacted", [
 ]);
 var CreateHostResponse = external_exports.object({
   host: AdminHostProjection,
-  token: external_exports.string()
+  token: external_exports.string(),
+  /**
+   * The gateway this deployment's Machines connect to, derived from its own
+   * configuration. The client never guesses it from the browser's address:
+   * the cloud that will accept the connection is the one that knows.
+   */
+  gatewayUrl: external_exports.string().min(1)
 });
 var ListHostsResponse = external_exports.object({
   hosts: external_exports.array(HostProjection)
@@ -18482,7 +18489,7 @@ async function generateTaskTitle(instructions, runner) {
     instructions.slice(0, INSTRUCTIONS_BUDGET),
     "</task_request>"
   ].join("\n");
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     const child = spawnCli(
       command,
       [
@@ -18505,7 +18512,7 @@ async function generateTaskTitle(instructions, runner) {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
-      resolve5(value);
+      resolve6(value);
     };
     const timer = setTimeout(() => {
       child.kill();
@@ -18767,22 +18774,22 @@ var HostClient = class _HostClient {
     const unwindingAssignments = [...this.activeAssignments.values()];
     for (const cancel of this.cancels.values()) cancel(stopReason);
     for (const entry of this.secretGrants.values()) {
-      for (const resolve5 of entry.resolvers) resolve5({});
+      for (const resolve6 of entry.resolvers) resolve6({});
       entry.resolvers = [];
       delete entry.value;
     }
     for (const entry of this.connectionGrants.values()) {
-      for (const resolve5 of entry.resolvers) resolve5([]);
+      for (const resolve6 of entry.resolvers) resolve6([]);
       entry.resolvers = [];
       delete entry.value;
     }
     for (const entry of this.providerGrants.values()) {
-      for (const resolve5 of entry.resolvers) resolve5([]);
+      for (const resolve6 of entry.resolvers) resolve6([]);
       entry.resolvers = [];
       delete entry.value;
     }
     for (const waiters of this.approvalWaiters.values()) {
-      for (const resolve5 of waiters.values()) resolve5({ approved: false, guidance: reason });
+      for (const resolve6 of waiters.values()) resolve6({ approved: false, guidance: reason });
     }
     for (const waiters of this.agentOpWaiters.values()) {
       for (const waiter of waiters.values()) {
@@ -19122,7 +19129,7 @@ var HostClient = class _HostClient {
         const entry = this.secretGrants.get(key) ?? { resolvers: [] };
         entry.value = message.secrets;
         entry.expiresAt = expiresAt;
-        for (const resolve5 of entry.resolvers) resolve5(message.secrets);
+        for (const resolve6 of entry.resolvers) resolve6(message.secrets);
         entry.resolvers = [];
         this.secretGrants.set(key, entry);
         return;
@@ -19153,13 +19160,13 @@ var HostClient = class _HostClient {
         const entry = this.connectionGrants.get(key) ?? { resolvers: [] };
         entry.value = message.connections;
         entry.expiresAt = expiresAt;
-        for (const resolve5 of entry.resolvers) resolve5(message.connections);
+        for (const resolve6 of entry.resolvers) resolve6(message.connections);
         entry.resolvers = [];
         this.connectionGrants.set(key, entry);
         const providerEntry = this.providerGrants.get(key) ?? { resolvers: [] };
         providerEntry.value = providers;
         providerEntry.expiresAt = authorityExpiresAt;
-        for (const resolve5 of providerEntry.resolvers) resolve5(providers);
+        for (const resolve6 of providerEntry.resolvers) resolve6(providers);
         providerEntry.resolvers = [];
         this.providerGrants.set(key, providerEntry);
         return;
@@ -19238,8 +19245,8 @@ var HostClient = class _HostClient {
       return redactCredentialText(text, sensitiveSnapshot()).slice(0, maxLength);
     };
     let resolveCancelled;
-    const cancelledPromise = new Promise((resolve5) => {
-      resolveCancelled = resolve5;
+    const cancelledPromise = new Promise((resolve6) => {
+      resolveCancelled = resolve6;
     });
     const endAuthority = (reason = "cloud_cancel") => {
       if (stopReason) return;
@@ -19248,21 +19255,21 @@ var HostClient = class _HostClient {
       authorityController.abort(reason);
       const secretEntry = this.secretGrants.get(cancelKey);
       if (secretEntry) {
-        for (const resolve5 of secretEntry.resolvers) resolve5({});
+        for (const resolve6 of secretEntry.resolvers) resolve6({});
         secretEntry.resolvers = [];
         delete secretEntry.value;
       }
       this.secretGrants.delete(cancelKey);
       const connectionEntry = this.connectionGrants.get(cancelKey);
       if (connectionEntry) {
-        for (const resolve5 of connectionEntry.resolvers) resolve5([]);
+        for (const resolve6 of connectionEntry.resolvers) resolve6([]);
         connectionEntry.resolvers = [];
         delete connectionEntry.value;
       }
       this.connectionGrants.delete(cancelKey);
       const providerEntry = this.providerGrants.get(cancelKey);
       if (providerEntry) {
-        for (const resolve5 of providerEntry.resolvers) resolve5([]);
+        for (const resolve6 of providerEntry.resolvers) resolve6([]);
         providerEntry.resolvers = [];
         delete providerEntry.value;
       }
@@ -19270,8 +19277,8 @@ var HostClient = class _HostClient {
       this.clearAuthorityExpiry(cancelKey);
       const approvalWaiters = this.approvalWaiters.get(cancelKey);
       if (approvalWaiters) {
-        for (const resolve5 of approvalWaiters.values()) {
-          resolve5({ approved: false, guidance: "task was cancelled" });
+        for (const resolve6 of approvalWaiters.values()) {
+          resolve6({ approved: false, guidance: "task was cancelled" });
         }
         approvalWaiters.clear();
       }
@@ -19334,9 +19341,9 @@ var HostClient = class _HostClient {
         return value;
       };
       if (entry.value) return Promise.resolve(capture(entry.value));
-      return new Promise((resolve5) => {
-        entry.resolvers.push((value) => resolve5(capture(value)));
-        setTimeout(() => resolve5(capture(entry.value ?? {})), _HostClient.SECRETS_WAIT_MS);
+      return new Promise((resolve6) => {
+        entry.resolvers.push((value) => resolve6(capture(value)));
+        setTimeout(() => resolve6(capture(entry.value ?? {})), _HostClient.SECRETS_WAIT_MS);
       });
     };
     const connections = () => {
@@ -19353,9 +19360,9 @@ var HostClient = class _HostClient {
         return value;
       };
       if (entry.value) return Promise.resolve(capture(entry.value));
-      return new Promise((resolve5) => {
-        entry.resolvers.push((value) => resolve5(capture(value)));
-        setTimeout(() => resolve5(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
+      return new Promise((resolve6) => {
+        entry.resolvers.push((value) => resolve6(capture(value)));
+        setTimeout(() => resolve6(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
       });
     };
     const providers = () => {
@@ -19372,9 +19379,9 @@ var HostClient = class _HostClient {
         return value;
       };
       if (entry.value !== void 0) return Promise.resolve(capture(entry.value));
-      return new Promise((resolve5) => {
-        entry.resolvers.push((value) => resolve5(capture(value)));
-        setTimeout(() => resolve5(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
+      return new Promise((resolve6) => {
+        entry.resolvers.push((value) => resolve6(capture(value)));
+        setTimeout(() => resolve6(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
       });
     };
     const linear = async () => {
@@ -19399,13 +19406,13 @@ var HostClient = class _HostClient {
         summary: safe(summary, 500),
         payload: safe(payload, 5e4)
       });
-      return new Promise((resolve5) => {
+      return new Promise((resolve6) => {
         const waiters = this.approvalWaiters.get(cancelKey) ?? /* @__PURE__ */ new Map();
         this.approvalWaiters.set(cancelKey, waiters);
-        waiters.set(requestId, resolve5);
+        waiters.set(requestId, resolve6);
         void cancelledPromise.then(() => {
           if (waiters.delete(requestId)) {
-            resolve5({ approved: false, guidance: "task was cancelled" });
+            resolve6({ approved: false, guidance: "task was cancelled" });
           }
         });
       });
@@ -19443,11 +19450,11 @@ var HostClient = class _HostClient {
         if (existing) message = existing;
         else terminalMessages.set(requestId, message);
       }
-      return new Promise((resolve5) => {
+      return new Promise((resolve6) => {
         const waiters = this.agentOpWaiters.get(cancelKey) ?? /* @__PURE__ */ new Map();
         this.agentOpWaiters.set(cancelKey, waiters);
         if (waiters.has(requestId)) {
-          resolve5({ ok: false, error: "provider settlement request is already in flight" });
+          resolve6({ ok: false, error: "provider settlement request is already in flight" });
           return;
         }
         const timer = setTimeout(() => {
@@ -19458,7 +19465,7 @@ var HostClient = class _HostClient {
                 (pending) => !(pending.type === "agent.op" && pending.requestId === requestId)
               );
             }
-            resolve5({
+            resolve6({
               ok: false,
               error: terminal ? "The provider call completed, but Zixt could not record its outcome. Do not retry; wait for reconciliation." : "the platform did not answer in time; verify with a list_* tool before retrying a mutating call"
             });
@@ -19466,7 +19473,7 @@ var HostClient = class _HostClient {
         }, _HostClient.AGENT_OP_TIMEOUT_MS);
         timer.unref?.();
         waiters.set(requestId, {
-          resolve: resolve5,
+          resolve: resolve6,
           timer,
           ...terminal ? { terminalMessage: message } : {}
         });
@@ -19510,12 +19517,12 @@ var HostClient = class _HostClient {
             "No GitHub change was attempted; the authority grant request was invalid."
           );
         }
-        const outcome = await new Promise((resolve5) => {
+        const outcome = await new Promise((resolve6) => {
           const timer = setTimeout(() => {
             const waiter = this.operationGrantWaiters.get(requestId);
             if (!waiter) return;
             this.operationGrantWaiters.delete(requestId);
-            resolve5({ grant: null, retryable: true, reason: "no_reply_from_zixt" });
+            resolve6({ grant: null, retryable: true, reason: "no_reply_from_zixt" });
           }, this.operationGrantTimeoutMs);
           timer.unref?.();
           this.operationGrantWaiters.set(requestId, {
@@ -19528,16 +19535,16 @@ var HostClient = class _HostClient {
             timer,
             accept: (grant) => {
               addSensitiveValues(providerGrantSensitiveValues(grant));
-              resolve5({ grant });
+              resolve6({ grant });
             },
-            deny: (retryable, reason, detail) => resolve5({ grant: null, retryable, reason, ...detail ? { detail } : {} })
+            deny: (retryable, reason, detail) => resolve6({ grant: null, retryable, reason, ...detail ? { detail } : {} })
           });
           try {
             socket.send(JSON.stringify(parsed.data));
           } catch {
             clearTimeout(timer);
             this.operationGrantWaiters.delete(requestId);
-            resolve5({ grant: null, retryable: false, reason: "connection_unavailable" });
+            resolve6({ grant: null, retryable: false, reason: "connection_unavailable" });
           }
         });
         if (outcome.grant) {
@@ -19578,7 +19585,7 @@ var HostClient = class _HostClient {
           )
         );
       }
-      return new Promise((resolve5, reject3) => {
+      return new Promise((resolve6, reject3) => {
         const timer = setTimeout(() => {
           if (this.browserCredentialWaiters.delete(requestId)) {
             reject3(
@@ -19597,7 +19604,7 @@ var HostClient = class _HostClient {
           timer,
           accept: (credential) => {
             addSensitiveValues(webLoginSensitiveValues(credential));
-            resolve5(credential);
+            resolve6(credential);
           },
           deny: (reason) => reject3(new Error(reason))
         });
@@ -19836,7 +19843,7 @@ async function installRelease(version2) {
     () => false
   );
   if (await present()) return entry;
-  const installed = await new Promise((resolve5) => {
+  const installed = await new Promise((resolve6) => {
     const child = spawn2(
       npmCommand(),
       ["install", "--prefix", prefix, "--no-audit", "--no-fund", `${PACKAGE_NAME}@${version2}`],
@@ -19844,21 +19851,44 @@ async function installRelease(version2) {
     );
     const timer = setTimeout(() => {
       child.kill("SIGKILL");
-      resolve5(false);
+      resolve6(false);
     }, INSTALL_TIMEOUT_MS);
     timer.unref?.();
     child.once("error", () => {
       clearTimeout(timer);
-      resolve5(false);
+      resolve6(false);
     });
     child.once("exit", (code) => {
       clearTimeout(timer);
-      resolve5(code === 0);
+      resolve6(code === 0);
     });
   });
   if (!installed) return null;
   return await present() ? entry : null;
 }
+var VERSION_DIR = /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/;
+async function pruneInstalledVersions(keep, root = versionsRoot()) {
+  const protectedDirs = new Set(keep);
+  const running = process.argv[1] ? resolve2(process.argv[1]) : null;
+  let entries;
+  try {
+    entries = await readdir(root);
+  } catch {
+    return [];
+  }
+  const removed = [];
+  for (const name of entries) {
+    if (protectedDirs.has(name) || !VERSION_DIR.test(name)) continue;
+    const dir = join3(root, name);
+    if (running && running.startsWith(`${dir}${sep}`)) continue;
+    try {
+      await rm(dir, { recursive: true, force: true });
+      removed.push(name);
+    } catch {
+    }
+  }
+  return removed;
+}
 function defaultSpawn(command, argv) {
   return spawn2(process.execPath, [command.entry ?? process.argv[1] ?? "", ...argv], {
     // stdin is a pipe this process owns: closing it is how the worker is
@@ -19879,9 +19909,10 @@ async function superviseHost(options = {}) {
   const argv = options.argv ?? process.argv.slice(2);
   const spawnWorker = options.spawnWorker ?? ((command2) => defaultSpawn(command2, argv));
   const install = options.installVersion ?? installRelease;
+  const prune = options.pruneVersions ?? ((keep) => pruneInstalledVersions(keep));
   const published = options.publishedVersion ?? (() => fetchPublishedVersion(releaseSourceUrl()));
   const now = options.now ?? Date.now;
-  const delay2 = options.delay ?? ((ms) => new Promise((resolve5) => setTimeout(resolve5, ms)));
+  const delay2 = options.delay ?? ((ms) => new Promise((resolve6) => setTimeout(resolve6, ms)));
   const log2 = options.log ?? ((message) => console.error(message));
   const signalWorker = options.signalWorker ?? signalWorkerGroup;
   let command = { entry: null, version: null };
@@ -19909,11 +19940,11 @@ async function superviseHost(options = {}) {
       const startedAt = now();
       child = spawnWorker(command);
       const { code, signal } = await new Promise(
-        (resolve5) => {
-          child.once("error", () => resolve5({ code: 1, signal: null }));
+        (resolve6) => {
+          child.once("error", () => resolve6({ code: 1, signal: null }));
           child.once(
             "exit",
-            (exitCode, exitSignal) => resolve5({ code: exitCode, signal: exitSignal })
+            (exitCode, exitSignal) => resolve6({ code: exitCode, signal: exitSignal })
           );
         }
       );
@@ -19934,6 +19965,11 @@ async function superviseHost(options = {}) {
         const entry = await install(target);
         if (entry) {
           log2(`Zixt Host: updating to ${target}`);
+          const keep = command.version === null ? [target] : [target, command.version];
+          const removed = await prune(keep).catch(() => []);
+          if (removed.length > 0) {
+            log2(`Zixt Host: removed ${removed.length} old version(s): ${removed.join(", ")}`);
+          }
           command = { entry, version: target };
         } else {
           log2(`Zixt Host: could not install ${target}; staying on the current version`);
@@ -23559,7 +23595,7 @@ function createGithubPushOrchestrator(input) {
 // src/tool-packs/github/git-bridge.ts
 import { spawn as spawn4 } from "node:child_process";
 import { randomUUID as randomUUID5 } from "node:crypto";
-import { chmod as chmod2, lstat as lstat2, mkdir as mkdir2, realpath as realpath3, rm } from "node:fs/promises";
+import { chmod as chmod2, lstat as lstat2, mkdir as mkdir2, realpath as realpath3, rm as rm2 } from "node:fs/promises";
 import { dirname, isAbsolute as isAbsolute4, join as join7, relative as relative2 } from "node:path";
 
 // src/runners/process-tree.ts
@@ -23580,7 +23616,7 @@ var ProcessTreeTerminationError = class extends Error {
   name = "ProcessTreeTerminationError";
 };
 function delay(ms) {
-  return new Promise((resolve5) => setTimeout(resolve5, ms));
+  return new Promise((resolve6) => setTimeout(resolve6, ms));
 }
 function processGroupAlive(pid) {
   try {
@@ -23671,7 +23707,7 @@ async function snapshotWindowsDescendants(rootPid) {
       "Windows process-tree observation could not start"
     );
   }
-  return new Promise((resolve5, reject3) => {
+  return new Promise((resolve6, reject3) => {
     let done = false;
     const timeout = setTimeout(() => {
       if (done) return;
@@ -23698,7 +23734,7 @@ async function snapshotWindowsDescendants(rootPid) {
         return;
       }
       try {
-        resolve5(completeWindowsDescendantPids(rootPid, processes));
+        resolve6(completeWindowsDescendantPids(rootPid, processes));
       } catch (caught) {
         reject3(caught);
       }
@@ -23752,7 +23788,7 @@ async function waitForProcessesExit(pids, timeoutMs) {
 }
 async function runTaskkill(pid, command, timeoutMs = TASKKILL_TIMEOUT_MS, independentlyTrackedPids = []) {
   const trustedCommand = command ?? defaultTaskkillCommand();
-  const result = await new Promise((resolve5, reject3) => {
+  const result = await new Promise((resolve6, reject3) => {
     const killer = spawn3(trustedCommand, ["/PID", String(pid), "/T", "/F"], {
       stdio: ["ignore", "pipe", "pipe"],
       windowsHide: true
@@ -23787,7 +23823,7 @@ async function runTaskkill(pid, command, timeoutMs = TASKKILL_TIMEOUT_MS, indepe
       done = true;
       clearTimeout(timeout);
       if (error52) reject3(error52);
-      else resolve5({ code: killer.exitCode, output, outputTruncated });
+      else resolve6({ code: killer.exitCode, output, outputTruncated });
     };
     killer.once(
       "error",
@@ -24268,8 +24304,8 @@ async function runGit(input, args, env) {
     let settled = false;
     let stopping = false;
     let resolveExited;
-    const exited = new Promise((resolve5) => {
-      resolveExited = resolve5;
+    const exited = new Promise((resolve6) => {
+      resolveExited = resolve6;
     });
     child.once("exit", resolveExited);
     const cleanup = () => {
@@ -24465,7 +24501,7 @@ function createGithubGitBridge(input) {
         const real = await requireRealDirectory(path, "git bridge");
         assertBelow(current.bridges, real, "git bridge");
         const hooks = join7(real, "hooks");
-        await rm(hooks, { recursive: true, force: true });
+        await rm2(hooks, { recursive: true, force: true });
         await mkdir2(hooks, { mode: DIRECTORY_MODE });
         await chmod2(hooks, DIRECTORY_MODE);
         const config2 = join7(real, "config");
@@ -24473,7 +24509,7 @@ function createGithubGitBridge(input) {
         active.add(real);
         return real;
       } catch (error52) {
-        await rm(path, { recursive: true, force: true }).catch(() => {
+        await rm2(path, { recursive: true, force: true }).catch(() => {
         });
         throw error52;
       }
@@ -24567,7 +24603,7 @@ function createGithubGitBridge(input) {
     },
     async destroyPrivateBridge(path) {
       const bridge = await requireBridge(path);
-      await rm(bridge, { recursive: true, force: true });
+      await rm2(bridge, { recursive: true, force: true });
       active.delete(bridge);
       credentialed2.delete(bridge);
     },
@@ -24575,7 +24611,7 @@ function createGithubGitBridge(input) {
       if (closed) return;
       closed = true;
       const paths = [...active];
-      await Promise.all(paths.map((path) => rm(path, { recursive: true, force: true })));
+      await Promise.all(paths.map((path) => rm2(path, { recursive: true, force: true })));
       active.clear();
       credentialed2.clear();
     }
@@ -24916,8 +24952,8 @@ function createRepositoryTools(runtime) {
 
 // src/tool-packs/github/workspace.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { chmod as chmod3, lstat as lstat3, mkdir as mkdir3, readFile, realpath as realpath4, rename, rm as rm2, writeFile as writeFile2 } from "node:fs/promises";
-import { isAbsolute as isAbsolute5, join as join8, relative as relative3, resolve as resolve2 } from "node:path";
+import { chmod as chmod3, lstat as lstat3, mkdir as mkdir3, readFile, realpath as realpath4, rename, rm as rm3, writeFile as writeFile2 } from "node:fs/promises";
+import { isAbsolute as isAbsolute5, join as join8, relative as relative3, resolve as resolve3 } from "node:path";
 var SAFE_LOCAL_ID = /^[A-Za-z0-9_-]{1,200}$/;
 var FULL_NAME2 = /^[A-Za-z0-9_.-]{1,100}\/[A-Za-z0-9_.-]{1,100}$/;
 var DIRECTORY_MODE2 = 448;
@@ -24940,7 +24976,7 @@ function assertBelow2(parent, child, label) {
   }
 }
 function samePath(left, right) {
-  return process.platform === "win32" ? resolve2(left).toLowerCase() === resolve2(right).toLowerCase() : resolve2(left) === resolve2(right);
+  return process.platform === "win32" ? resolve3(left).toLowerCase() === resolve3(right).toLowerCase() : resolve3(left) === resolve3(right);
 }
 async function requireRealDirectory2(path, label) {
   const entry = await lstat3(path).catch(() => null);
@@ -25100,11 +25136,11 @@ async function createGithubWorkspaceService(input) {
         try {
           await rename(metadataTemporary, metadataPath);
         } catch (error52) {
-          await rm2(destination, { recursive: true, force: true });
+          await rm3(destination, { recursive: true, force: true });
           throw error52;
         }
       } finally {
-        await rm2(metadataTemporary, { force: true }).catch(() => {
+        await rm3(metadataTemporary, { force: true }).catch(() => {
         });
       }
       const path = await requireRealDirectory2(destination, "GitHub repository");
@@ -25116,7 +25152,7 @@ async function createGithubWorkspaceService(input) {
         headSha
       };
     } finally {
-      await rm2(temporary, { recursive: true, force: true }).catch(() => {
+      await rm3(temporary, { recursive: true, force: true }).catch(() => {
       });
     }
   };
@@ -26757,8 +26793,8 @@ var linearToolPackFactory = {
   async create(grant, context) {
     let resolveCancelled;
     let closed = false;
-    const cancelled = new Promise((resolve5) => {
-      resolveCancelled = resolve5;
+    const cancelled = new Promise((resolve6) => {
+      resolveCancelled = resolve6;
     });
     const cancel = () => {
       if (closed) return;
@@ -27346,7 +27382,7 @@ function createAskUserServer() {
   let server;
   let listening;
   function ensureListening() {
-    listening ??= new Promise((resolve5, reject3) => {
+    listening ??= new Promise((resolve6, reject3) => {
       server = createServer2((req, res) => {
         res.on("error", () => {
         });
@@ -27362,7 +27398,7 @@ function createAskUserServer() {
       server.on("error", reject3);
       server.listen(0, "127.0.0.1", () => {
         const address = server.address();
-        if (address && typeof address === "object") resolve5(address.port);
+        if (address && typeof address === "object") resolve6(address.port);
         else reject3(new Error("ask_user server failed to bind"));
       });
       server.unref();
@@ -28275,9 +28311,9 @@ password=${credential.accessToken}
 
 // src/runners/run-artifacts.ts
 import { spawn as spawn5 } from "node:child_process";
-import { chmod as chmod5, lstat as lstat5, mkdir as mkdir6, readdir, readFile as readFile2, realpath as realpath6, rm as rm3, writeFile as writeFile5 } from "node:fs/promises";
+import { chmod as chmod5, lstat as lstat5, mkdir as mkdir6, readdir as readdir2, readFile as readFile2, realpath as realpath6, rm as rm4, writeFile as writeFile5 } from "node:fs/promises";
 import { homedir as homedir3 } from "node:os";
-import { isAbsolute as isAbsolute8, join as join11, relative as relative5, resolve as resolve3, win32 } from "node:path";
+import { isAbsolute as isAbsolute8, join as join11, relative as relative5, resolve as resolve4, win32 } from "node:path";
 var SAFE_SEGMENT2 = /^[A-Za-z0-9_-]{1,200}$/;
 var DIRECTORY_MODE4 = 448;
 var FILE_MODE3 = 384;
@@ -28421,10 +28457,10 @@ async function rejectWindowsSymlinkAncestors(profile, target) {
   }
 }
 async function prepareRoot(root) {
-  const absolute = resolve3(root);
+  const absolute = resolve4(root);
   let realProfile;
   if (process.platform === "win32") {
-    const profile = resolve3(homedir3());
+    const profile = resolve4(homedir3());
     assertWindowsProfileBoundary(profile, absolute);
     await rejectWindowsSymlinkAncestors(profile, absolute);
     realProfile = await realpath6(profile);
@@ -28535,7 +28571,7 @@ async function createRunArtifacts(input) {
   requireSafeSegment(input.agentId, "agentId");
   requireSafeSegment(input.runToken, "runToken");
   const root = await prepareRoot(input.root);
-  const removeTree = input.removeTree ?? ((path) => rm3(path, { recursive: true, force: true }));
+  const removeTree = input.removeTree ?? ((path) => rm4(path, { recursive: true, force: true }));
   const cleanupRetryDelayMs = input.cleanupRetryDelayMs ?? CLEANUP_RETRY_DELAY_MS;
   const agentRoot = await prepareAgentRoot(root, input.agentId);
   await lockDownWindowsDirectories([root, agentRoot]);
@@ -28600,10 +28636,10 @@ async function removePrivateTreeWithRetries(path, removeTree, retryDelayMs) {
   }
 }
 async function sweepOrphanedRunArtifacts(root) {
-  const absolute = resolve3(root);
+  const absolute = resolve4(root);
   let realProfile;
   if (process.platform === "win32") {
-    const profile = resolve3(homedir3());
+    const profile = resolve4(homedir3());
     assertWindowsProfileBoundary(profile, absolute);
     await rejectWindowsSymlinkAncestors(profile, absolute);
     realProfile = await realpath6(profile);
@@ -28618,17 +28654,17 @@ async function sweepOrphanedRunArtifacts(root) {
   if (realProfile) assertWindowsProfileBoundary(realProfile, realRoot);
   await chmod5(realRoot, DIRECTORY_MODE4);
   await lockDownWindowsDirectories([realRoot]);
-  const agents = await readdir(realRoot, { withFileTypes: true });
+  const agents = await readdir2(realRoot, { withFileTypes: true });
   let removed = 0;
   for (const agent of agents) {
     if (!SAFE_SEGMENT2.test(agent.name) || !agent.isDirectory() || agent.isSymbolicLink()) continue;
     const agentPath = join11(realRoot, agent.name);
-    const runs = await readdir(agentPath, { withFileTypes: true });
+    const runs = await readdir2(agentPath, { withFileTypes: true });
     for (const run2 of runs) {
       if (!SAFE_SEGMENT2.test(run2.name) || !run2.isDirectory() || run2.isSymbolicLink()) continue;
       const runPath = join11(agentPath, run2.name);
       assertBelow3(agentPath, runPath);
-      await rm3(runPath, { recursive: true, force: true });
+      await rm4(runPath, { recursive: true, force: true });
       removed++;
     }
   }
@@ -28656,7 +28692,7 @@ async function forgetRunAssignment(runToken, registryRoot = defaultRunRegistryRo
   if (retainingAssignments) return;
   if (!SAFE_SEGMENT2.test(runToken)) return;
   try {
-    await rm3(join11(registryRoot, `${runToken}.json`), { force: true });
+    await rm4(join11(registryRoot, `${runToken}.json`), { force: true });
   } catch {
   }
 }
@@ -28680,7 +28716,7 @@ function parseAssignment(text) {
 async function readRecordedRunAssignments(registryRoot = defaultRunRegistryRoot()) {
   let entries;
   try {
-    entries = await readdir(registryRoot, { withFileTypes: true });
+    entries = await readdir2(registryRoot, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -28701,7 +28737,7 @@ async function readRecordedRunAssignments(registryRoot = defaultRunRegistryRoot(
 }
 async function clearRecordedRunAssignments(registryRoot = defaultRunRegistryRoot()) {
   try {
-    await rm3(registryRoot, { recursive: true, force: true });
+    await rm4(registryRoot, { recursive: true, force: true });
   } catch {
   }
 }
@@ -29233,7 +29269,7 @@ function runCliProcess(options) {
       usage: { inputTokens: 0, outputTokens: 0 }
     });
   }
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     const child = options.windowsWrapper ? spawn6(
       options.windowsWrapper.nodeCommand,
       [options.windowsWrapper.scriptPath, options.windowsWrapper.launchConfigPath],
@@ -29266,7 +29302,7 @@ function runCliProcess(options) {
       if (settled) return;
       settled = true;
       clearInterval(timer);
-      resolve5(result);
+      resolve6(result);
     };
     const terminate = (result) => {
       if (settled || forcedResult) return;
@@ -29869,7 +29905,7 @@ function improveCodexErrorMessage(error52) {
 // src/runners/git-preflight.ts
 import { spawn as spawn7 } from "node:child_process";
 import { realpath as realpath8 } from "node:fs/promises";
-import { isAbsolute as isAbsolute9, resolve as resolve4 } from "node:path";
+import { isAbsolute as isAbsolute9, resolve as resolve5 } from "node:path";
 var OUTPUT_LIMIT = 8192;
 var DEFAULT_TIMEOUT_MS4 = 1e4;
 var VERSION_PATTERN = /^git version [^\r\n]{1,108}$/;
@@ -29888,7 +29924,7 @@ async function preflightGit(options = {}) {
   if (configured !== void 0 && !isAbsolute9(configured)) {
     return unavailable("configured git command must be an absolute file", checkedAt);
   }
-  const trustedCwd = await realpath8(resolve4(options.trustedCwd ?? process.cwd())).catch(() => null);
+  const trustedCwd = await realpath8(resolve5(options.trustedCwd ?? process.cwd())).catch(() => null);
   if (!trustedCwd)
     return unavailable("Host-owned git preflight directory is unavailable", checkedAt);
   const executablePath = await resolveTrustedCliCommand(configured ?? "git", {
@@ -30110,7 +30146,7 @@ function parseAuth(result) {
   return "unknown";
 }
 function run(command, args) {
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     const child = spawnCli(command, args, {
       stdio: ["ignore", "pipe", "pipe"],
       windowsHide: true
@@ -30126,7 +30162,7 @@ function run(command, args) {
       if (settled) return;
       settled = true;
       clearTimeout(timeout);
-      resolve5(result);
+      resolve6(result);
     };
     const timeout = setTimeout(() => {
       child.kill();
@@ -30383,7 +30419,7 @@ if (cliOptions.help) {
 `);
   process.exit(0);
 }
-var url2 = process.env.ZIXT_CLOUD_URL ?? "ws://localhost:3001/gateway";
+var url2 = process.env.ZIXT_CLOUD_URL ?? DEFAULT_HOST_GATEWAY_URL;
 var token = process.env.ZIXT_HOST_TOKEN;
 var machine = hostname3();
 if (!token) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.4",
+  "version": "0.0.6",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",