rnxsim 0.1.441 → 0.1.443

package/cli/commands/control.ts

@@ -64,6 +64,7 @@ import {
   BridgeSimLockedError,
   createBridge,
   createBridgeFromParsed,
+  formatLockOwner,
   parseBridgeCliArgs,
   printBridgeWorldNotice,
   resolveBridgePortForPin,
@@ -865,143 +866,6 @@ async function waitForSimReady(
   return null
 }
 
-// returns a short, human-friendly description of what a sim is showing —
-// e.g. "bundle host/...path", "connect :8081", "demo bluesky". returns null
-// when there's no useful summary beyond the raw URL itself, so the caller
-// can skip the redundant `loaded:` line in that case.
-export function summarizeSimUrl(url: string | undefined): string | null {
-  if (!url) return null
-  try {
-    const parsed = new URL(url)
-    if (parsed.searchParams.has('bundle')) {
-      const bundleUrl = parsed.searchParams.get('bundle') || ''
-      try {
-        const bundle = new URL(bundleUrl)
-        const shortPath =
-          bundle.pathname.length > 36
-            ? `...${bundle.pathname.slice(-36)}`
-            : bundle.pathname
-        return `bundle ${bundle.host}${shortPath}`
-      } catch {
-        return 'bundle'
-      }
-    }
-    if (parsed.searchParams.has('port')) {
-      return `connect :${parsed.searchParams.get('port') || ''}`
-    }
-    if (parsed.searchParams.has('open')) {
-      return `connect ${parsed.searchParams.get('open') || ''}`
-    }
-    if (parsed.searchParams.has('demo')) {
-      return `demo ${parsed.searchParams.get('demo') || 'default'}`
-    }
-    if (
-      parsed.pathname.includes('/sootsim/index.html') ||
-      parsed.pathname === '/sootsim/' ||
-      parsed.pathname === '/sootsim'
-    ) {
-      return 'embedded rnx'
-    }
-    return null
-  } catch {
-    return null
-  }
-}
-
-// a lock owner is either a friendly cli label ("active user") or a raw cli
-// identity key ("CLAUDE_CODE_SESSION_ID:<uuid>", "gppid-1234"). keep the list
-// readable by collapsing a "<source>:<value>" identity to a short form that
-// still says which agent holds it.
-function formatLockOwner(owner: string): string {
-  const colon = owner.indexOf(':')
-  if (colon <= 0) return owner.length > 24 ? `${owner.slice(0, 21)}…` : owner
-  const source = owner.slice(0, colon)
-  const value = owner.slice(colon + 1)
-  const short = value.length > 12 ? `${value.slice(0, 8)}…` : value
-  if (
-    source === 'TM_SESSION' ||
-    source === 'CLAUDE_CODE_SESSION_ID' ||
-    source === 'CODEX_THREAD_ID'
-  ) {
-    return `agent ${short}`
-  }
-  return `${source} ${short}`
-}
-
-export function printConnectedSims(sims: BridgeSimInfo[], selectedId?: string) {
-  if (sims.length === 0) {
-    console.log('  no sims connected')
-    return
-  }
-  console.log(`  connected sims (${sims.length}):\n`)
-  for (const sim of sims) {
-    const lockTag =
-      sim.lockedBy && sim.lockExpiresAt
-        ? `locked by ${formatLockOwner(sim.lockedBy)} (${Math.max(0, Math.round((sim.lockExpiresAt - Date.now()) / 1000))}s)`
-        : ''
-    const tags = [
-      sim.isPrimary ? 'primary' : '',
-      sim.id === selectedId ? 'selected' : '',
-      sim.readyState,
-      sim.userVisible === false ? 'hidden' : sim.userVisible === true ? 'visible' : '',
-      sim.attachedCliCount && sim.attachedCliCount > 0 ? 'in use' : '',
-      sim.userFocused ? 'focused' : '',
-      lockTag,
-    ].filter(Boolean)
-    console.log(`  ${sim.id}${tags.length ? ` [${tags.join(', ')}]` : ''}`)
-    const loaded = summarizeSimUrl(sim.url)
-    if (loaded) {
-      console.log(`    loaded: ${loaded}`)
-    } else if (sim.url) {
-      // no friendly summary — show the raw url so the caller can still copy it.
-      // truncate aggressively so a 400-char metro url doesn't dominate the list.
-      const shown = sim.url.length > 96 ? `${sim.url.slice(0, 93)}…` : sim.url
-      console.log(`    url: ${shown}`)
-    } else if (sim.origin) {
-      console.log(`    origin: ${sim.origin}`)
-    }
-    const engine = describeEngineSource(sim)
-    if (engine) console.log(`    engine: ${engine}`)
-    if (sim.title) console.log(`    title: ${sim.title}`)
-    if (sim.visibilityState && sim.visibilityState !== 'visible') {
-      console.log(`    visibility: ${sim.visibilityState}`)
-    }
-    console.log(`    connected: ${formatRelativeAge(Date.now() - sim.connectedAt)}`)
-    if (sim.lastActiveAt && sim.lastActiveAt > 0) {
-      console.log(`    last active: ${formatRelativeAge(Date.now() - sim.lastActiveAt)}`)
-    }
-  }
-}
-
-// classify which engine a sim is running so dev-vs-published is never ambiguous
-// to agents or humans reading `rnx list`. dev shell serves local source on
-// :5173; the Contrast app embeds rnx on :3000; the bridge/daemon and the
-// /__soot plugin serve the active runtime dir — which, inside a dev checkout, is
-// the fresh dev-stack build (resolveDevCheckoutRuntimeRoot mode boundary), not a
-// published runtime. keep this label honest so it never says "published" while
-// actually serving local build output.
-function describeEngineSource(sim: { url?: string; origin?: string }): string | null {
-  const ref = sim.url || sim.origin || ''
-  if (!ref) return null
-  try {
-    const port = new URL(ref).port
-    if (port === '5173') return 'dev — local source (:5173)'
-    if (port === '3000') return 'Contrast app embedded (:3000)'
-    if (resolveDevCheckoutRuntimeRoot()) return `dev — local build (:${port || '?'})`
-    return `runtime — published engine (:${port || '?'})`
-  } catch {
-    return null
-  }
-}
-
-function formatRelativeAge(ms: number): string {
-  const sec = Math.max(0, Math.round(ms / 1000))
-  if (sec < 60) return `${sec}s ago`
-  if (sec < 3600) return `${Math.round(sec / 60)}m ago`
-  if (sec < 86400) return `${Math.round(sec / 3600)}h ago`
-  return `${Math.round(sec / 86400)}d ago`
-}
-
 export async function waitForSimMatch(
   wsPort: number,
   commandTimeoutMs: number,

package/cli/commands/flow.ts

@@ -16,10 +16,10 @@ import {
 } from '../bridge-flow-runner'
 import { readCurrentSimId, saveCurrentSimId } from '../current-sim'
 import { findDesktopCompanion } from '../desktop-companion'
+import { exportFlowSession } from '../flow-export'
 import { parseFlowFile, validateFlowFile } from '../flow-file'
 import { FlowLiveStatusReporter } from '../flow-live-status'
 import {
-  exportFlowSession,
   finalizeFlowSession,
   keepFlowCandidate,
   startFlowSession,

package/cli/commands/inspect/list.ts

@@ -1,8 +1,8 @@
 // `rnx list` — connected sims, with the active one marked.
 
-import { printConnectedSims } from '../control'
+import { resolveDevCheckoutRuntimeRoot } from '../../../src/runtime-assets'
+import { type BridgeSimInfo, formatLockOwner, type WsBridge } from '../../ws-bridge'
 import { printJson, wantsJson } from './shared'
-import type { WsBridge } from '../../ws-bridge'
 
 export async function runListSubcommand(opts: {
   bridge: WsBridge
@@ -56,3 +56,120 @@ export async function runListSubcommand(opts: {
     console.log(`  (${sims.length - filtered.length} more hidden — pass --all to show)`)
   }
 }
+
+// returns a short, human-friendly description of what a sim is showing —
+// e.g. "bundle host/...path", "connect :8081", "demo bluesky". returns null
+// when there's no useful summary beyond the raw URL itself, so the caller
+// can skip the redundant `loaded:` line in that case.
+function summarizeSimUrl(url: string | undefined): string | null {
+  if (!url) return null
+  try {
+    const parsed = new URL(url)
+    if (parsed.searchParams.has('bundle')) {
+      const bundleUrl = parsed.searchParams.get('bundle') || ''
+      try {
+        const bundle = new URL(bundleUrl)
+        const shortPath =
+          bundle.pathname.length > 36
+            ? `...${bundle.pathname.slice(-36)}`
+            : bundle.pathname
+        return `bundle ${bundle.host}${shortPath}`
+      } catch {
+        return 'bundle'
+      }
+    }
+    if (parsed.searchParams.has('port')) {
+      return `connect :${parsed.searchParams.get('port') || ''}`
+    }
+    if (parsed.searchParams.has('open')) {
+      return `connect ${parsed.searchParams.get('open') || ''}`
+    }
+    if (parsed.searchParams.has('demo')) {
+      return `demo ${parsed.searchParams.get('demo') || 'default'}`
+    }
+    if (
+      parsed.pathname.includes('/sootsim/index.html') ||
+      parsed.pathname === '/sootsim/' ||
+      parsed.pathname === '/sootsim'
+    ) {
+      return 'embedded rnx'
+    }
+    return null
+  } catch {
+    return null
+  }
+}
+
+function printConnectedSims(sims: BridgeSimInfo[], selectedId?: string) {
+  if (sims.length === 0) {
+    console.log('  no sims connected')
+    return
+  }
+  console.log(`  connected sims (${sims.length}):\n`)
+  for (const sim of sims) {
+    const lockTag =
+      sim.lockedBy && sim.lockExpiresAt
+        ? `locked by ${formatLockOwner(sim.lockedBy)} (${Math.max(0, Math.round((sim.lockExpiresAt - Date.now()) / 1000))}s)`
+        : ''
+    const tags = [
+      sim.isPrimary ? 'primary' : '',
+      sim.id === selectedId ? 'selected' : '',
+      sim.readyState,
+      sim.userVisible === false ? 'hidden' : sim.userVisible === true ? 'visible' : '',
+      sim.attachedCliCount && sim.attachedCliCount > 0 ? 'in use' : '',
+      sim.userFocused ? 'focused' : '',
+      lockTag,
+    ].filter(Boolean)
+    console.log(`  ${sim.id}${tags.length ? ` [${tags.join(', ')}]` : ''}`)
+    const loaded = summarizeSimUrl(sim.url)
+    if (loaded) {
+      console.log(`    loaded: ${loaded}`)
+    } else if (sim.url) {
+      // no friendly summary — show the raw url so the caller can still copy it.
+      // truncate aggressively so a 400-char metro url doesn't dominate the list.
+      const shown = sim.url.length > 96 ? `${sim.url.slice(0, 93)}…` : sim.url
+      console.log(`    url: ${shown}`)
+    } else if (sim.origin) {
+      console.log(`    origin: ${sim.origin}`)
+    }
+    const engine = describeEngineSource(sim)
+    if (engine) console.log(`    engine: ${engine}`)
+    if (sim.title) console.log(`    title: ${sim.title}`)
+    if (sim.visibilityState && sim.visibilityState !== 'visible') {
+      console.log(`    visibility: ${sim.visibilityState}`)
+    }
+    console.log(`    connected: ${formatRelativeAge(Date.now() - sim.connectedAt)}`)
+    if (sim.lastActiveAt && sim.lastActiveAt > 0) {
+      console.log(`    last active: ${formatRelativeAge(Date.now() - sim.lastActiveAt)}`)
+    }
+  }
+}
+
+// classify which engine a sim is running so dev-vs-published is never ambiguous
+// to agents or humans reading `rnx list`. dev shell serves local source on
+// :5173; the Contrast app embeds rnx on :3000; the bridge/daemon and the
+// /__soot plugin serve the active runtime dir — which, inside a dev checkout, is
+// the fresh dev-stack build (resolveDevCheckoutRuntimeRoot mode boundary), not a
+// published runtime. keep this label honest so it never says "published" while
+// actually serving local build output.
+function describeEngineSource(sim: { url?: string; origin?: string }): string | null {
+  const ref = sim.url || sim.origin || ''
+  if (!ref) return null
+  try {
+    const port = new URL(ref).port
+    if (port === '5173') return 'dev — local source (:5173)'
+    if (port === '3000') return 'Contrast app embedded (:3000)'
+    if (resolveDevCheckoutRuntimeRoot()) return `dev — local build (:${port || '?'})`
+    return `runtime — published engine (:${port || '?'})`
+  } catch {
+    return null
+  }
+}
+
+function formatRelativeAge(ms: number): string {
+  const sec = Math.max(0, Math.round(ms / 1000))
+  if (sec < 60) return `${sec}s ago`
+  if (sec < 3600) return `${Math.round(sec / 60)}m ago`
+  if (sec < 86400) return `${Math.round(sec / 3600)}h ago`
+  return `${Math.round(sec / 86400)}d ago`
+}

package/cli/commands/inspect.ts

@@ -19,6 +19,7 @@ import { shouldPrintInspectNotice } from '../inspect-notice-state'
 import { TOP_LEVEL_RUNTIME_COMMANDS } from '../parse-args'
 import { rethrowIfExit, rnxExit } from '../run-rnx'
 import {
+  type BridgeTransportOption,
   callInBridge,
   callInBridgeWrite,
   checkSimHealth,
@@ -107,7 +108,7 @@ import type {
   SootSimScrollPerformanceTrace,
 } from '@rnx/globals'
 
-interface InspectOptions {
+interface InspectOptions extends BridgeTransportOption {
   port?: number
   verbose?: boolean
   timeoutMs?: number
@@ -1202,7 +1203,7 @@ export async function runInspect(args: string[], opts: InspectOptions) {
     return
   }
 
-  const bridge = createBridgeFromParsed(parsed)
+  const bridge = (opts.createBridge ?? createBridgeFromParsed)(parsed)
   const noticeScope = simId || 'default'
   const consoleSummarySkip = new Set([
     'errors',

package/cli/commands/platform.ts

@@ -29,27 +29,33 @@ function isDeviceModel(value: string): value is DeviceModel {
 const REMOTE_USAGE =
   'usage: rnx ios --remote <local bundle.js|https://bundle-url> [--assets <dir>] [--device <model>]'
 
+// flags this command reads for itself rather than treating as the bundle.
+const REMOTE_VALUE_FLAGS = new Set(['--device', '--assets', '--name', '--endpoint'])
+
 function remoteInputFromArgs(args: string[]): {
   bundlePath: string
   assetsPath: string | null
+  name: string | null
 } {
   const positional: string[] = []
   let assetsPath: string | null = null
+  let name: string | null = null
   for (let index = 0; index < args.length; index++) {
     const arg = args[index]
-    if (arg === '--remote') continue
-    if (arg === '--device') {
-      index++
-      continue
-    }
-    if (arg === '--assets') {
-      assetsPath = args[++index] ?? null
-      if (!assetsPath) throw new Error('rnx ios --remote --assets requires a directory')
+    if (arg === '--remote' || arg === '--nano') continue
+    if (REMOTE_VALUE_FLAGS.has(arg)) {
+      const value = args[++index] ?? null
+      if (!value) throw new Error(`rnx ios --remote ${arg} requires a value`)
+      if (arg === '--assets') assetsPath = value
+      if (arg === '--name') name = value
       continue
     }
-    if (arg.startsWith('--assets=')) {
-      assetsPath = arg.slice('--assets='.length) || null
-      if (!assetsPath) throw new Error('rnx ios --remote --assets requires a directory')
+    const assigned = arg.match(/^(--[a-z-]+)=(.*)$/)
+    if (assigned && REMOTE_VALUE_FLAGS.has(assigned[1] ?? '')) {
+      const value = assigned[2] ?? ''
+      if (!value) throw new Error(`rnx ios --remote ${assigned[1]} requires a value`)
+      if (assigned[1] === '--assets') assetsPath = value
+      if (assigned[1] === '--name') name = value
       continue
     }
     if (
@@ -68,7 +74,25 @@ function remoteInputFromArgs(args: string[]): {
     positional.push(arg)
   }
   if (positional.length !== 1 || !positional[0]) throw new Error(REMOTE_USAGE)
-  return { bundlePath: positional[0], assetsPath }
+  return { bundlePath: positional[0], assetsPath, name }
+}
+
+/**
+ * the box's name, taken from what was built.
+ *
+ * a bundle arrives as a file or a URL and neither carries a name, so the last
+ * path segment without its extension is the one thing both have. box names are
+ * lowercase words joined by dashes, so anything else in it becomes a dash.
+ */
+function boxNameForBundle(bundlePath: string): string {
+  const segment = bundlePath.split(/[?#]/)[0]?.split('/').filter(Boolean).at(-1) ?? ''
+  const stem = segment.replace(/\.[^.]+$/, '')
+  const name = stem
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-+|-+$/g, '')
+  if (!name) throw new Error(`rnx ios --remote could not name a box after ${bundlePath}`)
+  return name
 }
 
 export async function runPlatformCommand(
@@ -123,6 +147,7 @@ export async function runPlatformCommand(
     }
     try {
       const input = remoteInputFromArgs(args)
+      if (!args.includes('--nano')) return await runRemoteBox(input, args)
       const {
         publishCloudSessionToShell,
         readCloudSession,
@@ -232,3 +257,61 @@ export async function runPlatformCommand(
   const { runOpenCommand } = await import('./control')
   return runOpenCommand(args, { port: opts.port })
 }
+
+/**
+ * `rnx ios --remote` — the app runs in a Box.
+ *
+ * the artifact is produced here, self-contained, exactly as it always was: one
+ * JavaScript file with its Metro assets embedded, so nothing it needs is left
+ * on this machine. it is then a Box created from an already-built app, which
+ * is what its page reads to boot the bundle instead of building one.
+ */
+async function runRemoteBox(
+  input: { bundlePath: string; assetsPath: string | null; name: string | null },
+  args: string[],
+): Promise<number> {
+  const command = 'ios --remote'
+  const [{ produceCloudArtifact }, box, { authHeaderOrExit, cloudAccountIdOrExit }] =
+    await Promise.all([import('../cloud-client'), import('./box'), import('../auth')])
+  const endpoint = box.cloudBoxEndpoint(args, command)
+  if (!endpoint) return 1
+  const { auth, header } = authHeaderOrExit(command)
+  const accountId = cloudAccountIdOrExit(auth)
+  // the Box holds the bundle in parts, so the size a single message can carry
+  // is not what limits this one and there is no cap to apply here.
+  const artifact = await produceCloudArtifact(
+    input.bundlePath,
+    input.assetsPath ?? undefined,
+    Number.POSITIVE_INFINITY,
+  )
+  const created = await box.createPrebuiltBundleBox({
+    bundle: new Uint8Array(artifact.bytes),
+    name: input.name ?? boxNameForBundle(input.bundlePath),
+    endpoint,
+    apiOrigin: box.cloudBoxApiOrigin(args, auth),
+    apiKey: header.replace(/^Bearer /, ''),
+    accountId,
+  })
+  const produced = artifact.receipt
+  console.log(`  box: ${created.id} (${artifact.bytes.length} bytes)`)
+  console.log(
+    `  source bundle: sha256:${produced.source.sha256} (${produced.source.bytes} bytes)`,
+  )
+  console.log(
+    `  normalized modules: ${produced.modules}; javascript ${produced.javascript.sourceBytes} -> ${produced.javascript.minifiedBytes} bytes`,
+  )
+  console.log(
+    `  embedded assets: ${produced.assets.descriptors} descriptors, ${produced.assets.variants} scales, ${produced.assets.bytes} bytes (${produced.assets.encodedBytes} encoded)`,
+  )
+  // the dest directory was chosen by resolving this bundle's descriptors
+  // against it, so say which one won rather than leaving it invisible.
+  if (artifact.assetsDirectory) console.log(`  asset dest: ${artifact.assetsDirectory}`)
+  for (const warning of artifact.warnings) console.warn(`  warning: ${warning}`)
+  const pageUrl = created.description.pageUrl
+  if (!pageUrl) {
+    console.error('  the box service returned no page to open')
+    return 1
+  }
+  console.log(`  open ${pageUrl}`)
+  return box.openInBrowser(pageUrl)
+}

package/cli/commands/reset.ts

@@ -1,5 +1,9 @@
 import { printBridgeFailureDiagnostics } from '../bridge-diagnostics'
-import { createBridgeFromParsed, parseBridgeCliArgs } from '../ws-bridge'
+import {
+  type BridgeTransportOption,
+  createBridgeFromParsed,
+  parseBridgeCliArgs,
+} from '../ws-bridge'
 import type { ResetResult } from '../../src/bridge-contract'
 
 function isResetResult(value: unknown): value is ResetResult {
@@ -30,7 +34,7 @@ options:
 
 export async function runReset(
   args: string[],
-  opts: { port?: number } = {},
+  opts: { port?: number } & BridgeTransportOption = {},
 ): Promise<number> {
   if (args.includes('--help') || args.includes('-h')) {
     printHelp()
@@ -46,7 +50,7 @@ export async function runReset(
     return 1
   }
 
-  const bridge = createBridgeFromParsed(parsed)
+  const bridge = (opts.createBridge ?? createBridgeFromParsed)(parsed)
   try {
     const value: unknown = await bridge.send({
       type: 'reset',

package/cli/commands/state.ts

@@ -1,5 +1,9 @@
 import { printBridgeFailureDiagnostics } from '../bridge-diagnostics'
-import { createBridgeFromParsed, parseBridgeCliArgs } from '../ws-bridge'
+import {
+  type BridgeTransportOption,
+  createBridgeFromParsed,
+  parseBridgeCliArgs,
+} from '../ws-bridge'
 import { formatSemanticTree, isSimSemanticTree } from './inspect/core'
 import type { SimStateResult } from '../../src/bridge-contract'
 
@@ -29,7 +33,7 @@ options:
 
 export async function runState(
   args: string[],
-  opts: { port?: number } = {},
+  opts: { port?: number } & BridgeTransportOption = {},
 ): Promise<number> {
   if (args.includes('--help') || args.includes('-h')) {
     printHelp()
@@ -45,7 +49,7 @@ export async function runState(
     return 1
   }
 
-  const bridge = createBridgeFromParsed(parsed)
+  const bridge = (opts.createBridge ?? createBridgeFromParsed)(parsed)
   try {
     const value: unknown = await bridge.send({ type: 'state' })
     if (!isSimStateResult(value)) {

package/cli/flow-export.ts

@@ -0,0 +1,55 @@
+// turning a recorded flow draft into a maestro-compatible YAML file.
+//
+// this is separate from flow-session.ts, the draft store, because the two have
+// different reach. every `do` verb writes a candidate into the store, so the
+// store has to load wherever the CLI's runtime commands load, including inside
+// a box shell running in workerd, where the `yaml` package does not load at
+// all. YAML formatting and writing the file are the export step, and only
+// `rnx flow` and `rnx maestro` ever reach it.
+
+import { mkdirSync, writeFileSync } from 'node:fs'
+import { dirname, resolve } from 'node:path'
+import yaml from 'yaml'
+import { validateFlowSteps } from './flow-file'
+import { finalizeFlowSession, readFlowSession } from './flow-session'
+
+export function exportFlowSession(outputPath?: string) {
+  const state = readFlowSession()
+  if (!state) return { active: false as const }
+
+  const yamlText = `${yaml.stringify(state.steps).trimEnd()}\n`
+  const issues = validateFlowSteps(state.steps)
+  if (issues.length > 0) {
+    return {
+      active: true as const,
+      valid: false as const,
+      issues,
+      yaml: yamlText,
+      stepCount: state.steps.length,
+      outputPath: null,
+    }
+  }
+
+  let resolvedOutputPath: string | null = null
+  if (outputPath) {
+    resolvedOutputPath = resolve(outputPath)
+    mkdirSync(dirname(resolvedOutputPath), { recursive: true })
+    writeFileSync(resolvedOutputPath, yamlText)
+  }
+
+  return {
+    active: true as const,
+    valid: true as const,
+    issues: [],
+    yaml: yamlText,
+    stepCount: state.steps.length,
+    outputPath: resolvedOutputPath,
+  }
+}
+
+export function endFlowSession(outputPath?: string) {
+  const result = exportFlowSession(outputPath)
+  if (!result.active) return result
+  finalizeFlowSession()
+  return result
+}

package/cli/flow-session.ts

@@ -1,8 +1,6 @@
 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'fs'
 import { tmpdir } from 'os'
 import { dirname, join, resolve } from 'path'
-import yaml from 'yaml'
-import { validateFlowSteps } from './flow-file'
 
 export type FlowDraftStep = Record<string, unknown>
 
@@ -140,48 +138,3 @@ export function keepFlowCandidate() {
     stepCount: next.steps.length,
   }
 }
-
-export function formatFlowDraftYaml(steps: FlowDraftStep[]) {
-  return yaml.stringify(steps).trimEnd() + '\n'
-}
-
-export function exportFlowSession(outputPath?: string) {
-  const state = readFlowSession()
-  if (!state) return { active: false as const }
-
-  const yamlText = formatFlowDraftYaml(state.steps)
-  const issues = validateFlowSteps(state.steps)
-  if (issues.length > 0) {
-    return {
-      active: true as const,
-      valid: false as const,
-      issues,
-      yaml: yamlText,
-      stepCount: state.steps.length,
-      outputPath: null,
-    }
-  }
-
-  let resolvedOutputPath: string | null = null
-  if (outputPath) {
-    resolvedOutputPath = resolve(outputPath)
-    mkdirSync(dirname(resolvedOutputPath), { recursive: true })
-    writeFileSync(resolvedOutputPath, yamlText)
-  }
-
-  return {
-    active: true as const,
-    valid: true as const,
-    issues: [],
-    yaml: yamlText,
-    stepCount: state.steps.length,
-    outputPath: resolvedOutputPath,
-  }
-}
-
-export function endFlowSession(outputPath?: string) {
-  const result = exportFlowSession(outputPath)
-  if (!result.active) return result
-  finalizeFlowSession()
-  return result
-}

package/cli/outbound-endpoints.ts

@@ -140,6 +140,8 @@ export const DECLARED_OUTBOUND_CALLS: Record<string, OutboundCallDeclaration> =
     { category: 'rnx_cloud_sim', count: 1 },
   'packages/sootsim/cli/cloud-client.ts :: fetch :: `${this.session.apiOrigin}/v1/sims/${encodeURIComponent(this.session.simId)}/commands`':
     { category: 'rnx_cloud_sim', count: 1 },
+  'packages/sootsim/cli/cloud-client.ts :: fetch :: `${this.session.apiOrigin}/v1/boxes/${encodeURIComponent(this.session.boxId)}/commands`':
+    { category: 'rnx_cloud_sim', count: 1 },
   'packages/sootsim/cli/cloud-client.ts :: fetch :: bundleUrl': {
     category: 'guest_app_network',
     count: 1,
@@ -351,6 +353,9 @@ export const DECLARED_OUTBOUND_CALLS: Record<string, OutboundCallDeclaration> =
   // `/deps-native/engine-assets/` directory.
   'packages/sootsim-engine/src/headless/browser-tenant-worker.ts :: fetch :: new URL(name, assetBase).href':
     { category: 'same_origin_runtime', count: 1 },
+  // hashes its own delivered script to identify the engine to display clients.
+  'packages/sootsim-engine/src/headless/browser-tenant-worker.ts :: fetch :: self.location.href':
+    { category: 'same_origin_runtime', count: 1 },
   // the tenant build's built-in app chunk prefetch list and the chunk bodies
   // it names, resolved against the worker chunk's own url.
   'packages/sootsim-engine/src/render-worker/app-in-worker.tsx :: fetch :: listUrl': {