instabox 0.8.41 → 0.8.43

package/bin/instabox.mjs

@@ -20,6 +20,7 @@ import { fileURLToPath } from 'node:url';
 import { createClient } from '../lib/api.mjs';
 import { orderBoxes } from '../lib/boxes.mjs';
 import { guestUserNote, localGuestUser } from '../lib/guestuser.mjs';
+import { resolveImage } from '../lib/image.mjs';
 import {
   bundledCli,
   checkCli,
@@ -45,7 +46,8 @@ const API = (
   process.env.INSTABOX_API ||
   'https://api.instabox.sh'
 ).replace(/\/$/, '');
-// The template a new box starts from: the CLI's and dashboard's default (shown as standard).
+// The template a new box starts from: the CLI's and dashboard's default (shown as standard). An
+// official template wins over a snapshot of the same name; snapshot:<name> picks the snapshot.
 const IMAGE = process.env.INSTABOX_IMAGE || 'agent-browser';
 // SSH certificate lifetime for a box with no timeout of its own.
 const CERT_MIN = 120;
@@ -77,6 +79,9 @@ function usage() {
       --no-skills                   do not install the instabox agent skills
   npx instabox@latest <command>     run an instabox CLI command (instabox help lists them)
 
+  INSTABOX_IMAGE=<template> picks the template sh starts from (default agent-browser);
+  INSTABOX_IMAGE=snapshot:<name> starts from a snapshot of yours instead.
+
   Usage data (steps and outcomes, never names or arguments) goes to the instabox team;
   INSTABOX_NO_TELEMETRY=1 or DO_NOT_TRACK=1 turns it off.
 `);
@@ -190,19 +195,25 @@ async function quotaFull(err) {
 }
 
 async function newBox() {
-  const { images } = await client.call('GET', '/v1/images');
-  const named = images.filter((i) => i.name === IMAGE || i.id === IMAGE);
-  const img = named.find((i) => i.official) || named[0];
+  const src = await resolveImage(IMAGE, {
+    // Unreadable: null, and the name goes to the server as a template.
+    templates: () =>
+      client.call('GET', '/v1/templates').then(
+        (r) => r?.templates ?? null,
+        () => null,
+      ),
+    snapshots: () => client.call('GET', '/v1/images').then((r) => r?.images ?? []),
+  });
+  if (src.missing) throw new Error(`no snapshot named ${src.missing} (instabox snapshot ls lists yours)`);
   const body = {
     name: `box-${randomBytes(3).toString('hex')}`,
     desiredState: 'running',
+    ...src,
   };
-  if (img) body.imageId = img.id;
-  else body.templateId = IMAGE;
   // The box's Linux user is named after yours, so `ssh <box>` over your own network works. A
   // box from one of your own snapshots keeps the snapshot's user.
   const user = localGuestUser();
-  if (user.name && (!img || img.official)) body.guestUser = user.name;
+  if (user.name && src.templateId) body.guestUser = user.name;
   const op = await waitOp(await client.call('POST', '/v1/machines', body));
   return { id: op.machineId, name: body.name, user };
 }

package/cli/SHA256SUMS

@@ -1,6 +1,6 @@
-26c52b54bfee75b2aa4ca84e7cc4610ddfc80af77bb2caacfd0c542c4dc317f9  instabox-darwin-amd64
-8c83fe4626e0f9d81400292ba458d8e5876645c69fd983b2ba2461fb2003592f  instabox-darwin-arm64
-dd63b071935b1734e8e1e88ea305784098932b5fcfb40aa37d1eea8a33aef74b  instabox-linux-amd64
-73bbe8ca2a61f12b46c4ea6dae4c768c21778fa4f81ef04b34d0e1bb1dadee70  instabox-linux-arm64
-e1f5b0ba29703f94a8971f1f4c89c59ba706a1ccda212675cfb7f6a37a48fb72  instabox-windows-amd64.exe
-33368d3fc99e29b4d375917db75226603c3d98074b344b00742bef1ccf5e4117  instabox-windows-arm64.exe
+5f289a8732580c39dada8a34beaffd3a9ce875791425baf6e2da5f08a3b9c2e0  instabox-darwin-amd64
+083ceebe0939785fe56a214c93d73cc0df79eedc0b9aa01c1105661db0b36222  instabox-darwin-arm64
+5083d4af6088cf8e9a3418faebd62162cec097fea9c267121afad2eb43cd315d  instabox-linux-amd64
+0793c3aae88c57afdc1a5b96da2e89426a45c892ded9a10e18072f5242765939  instabox-linux-arm64
+c618076b713a5fac84f6dfa48369246c72def71f5f246a4cbcd30e87cf572a0e  instabox-windows-amd64.exe
+3a18e15376d0e8fa59f535158b81903ae052e4f5aa1f1ea3d99de2574161c421  instabox-windows-arm64.exe

package/lib/image.mjs

@@ -0,0 +1,32 @@
+// What INSTABOX_IMAGE names: an official template (GET /v1/templates), as `id` or `id@version`.
+// A snapshot of yours is named with `snapshot:<name or id>`, so one that shares a template's name
+// never stands in for it. A bare name that is no template still finds a snapshot of that name.
+
+export const SNAPSHOT_PREFIX = 'snapshot:';
+
+// The snapshot named want: by id first, else by name.
+function findSnapshot(snapshots, want) {
+  const list = Array.isArray(snapshots) ? snapshots.filter((s) => s && typeof s.id === 'string') : [];
+  return list.find((s) => s.id === want) || list.find((s) => s.name === want) || null;
+}
+
+// isTemplate: whether image (id or id@version) is one of templates. templates null (the list
+// could not be read): treated as a template, so the server decides and a snapshot never wins.
+export function isTemplate(image, templates) {
+  if (!Array.isArray(templates)) return true;
+  const id = image.split('@')[0];
+  return templates.some((t) => t && t.id === id);
+}
+
+// resolveImage turns image into the create request's source: { templateId } or { imageId }, or
+// { missing } for a snapshot: name that matches none. snapshots is read only when needed.
+export async function resolveImage(image, { templates, snapshots }) {
+  if (image.startsWith(SNAPSHOT_PREFIX)) {
+    const want = image.slice(SNAPSHOT_PREFIX.length);
+    const s = findSnapshot(await snapshots(), want);
+    return s ? { imageId: s.id } : { missing: want };
+  }
+  if (isTemplate(image, await templates())) return { templateId: image };
+  const s = findSnapshot(await snapshots(), image);
+  return s ? { imageId: s.id } : { templateId: image };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instabox",
-  "version": "0.8.41",
+  "version": "0.8.43",
   "description": "A cloud box for your coding agent, the instabox CLI and its agent skills in one command: npx instabox@latest",
   "type": "module",
   "bin": {