waterbox 0.1.0-alpha.1 → 0.1.0-alpha.2

package/README.md

@@ -2,32 +2,38 @@
 
 `waterbox` is the supported local stdio MCP for isolated, stateful coding
 sandboxes. It requires Node.js 24.15.0 or newer, opens no listener, and supports
-explicitly configured Box and Vercel Sandbox accounts. There is no hosted
-Waterbox mode and no JavaScript library API.
+hosted Waterbox plus explicitly configured direct Box and Vercel Sandbox accounts.
+It is not the hosted Waterbox service and has no JavaScript library API.
 
 ## Install And Configure
 
 ```sh
-npx add-mcp waterbox@next
+npx add-mcp waterbox
 ```
 
-This prerelease is distributed under the npm `next` tag. The command installs
+This prerelease is available through npm's default tag. The command installs
 MCP client configuration equivalent to `{ "command": "npx", "args": ["-y",
-"waterbox@next"] }`. It does not collect provider credentials. Running `npx
-waterbox@next` directly starts the stdio server; use an explicit argument for
+"waterbox"] }`. It does not collect provider credentials. Running `npx
+waterbox` directly starts the stdio server; use an explicit argument for
 terminal-only onboarding:
 
 ```sh
-npx waterbox@next setup
-npx waterbox@next status
-npx waterbox@next logout
+npx waterbox setup
+npx waterbox status
+npx waterbox logout
 ```
 
 Interactive setup stores only the provider credential in the native keyring.
 Non-secret settings are written atomically to `~/.waterbox/config.json` using
-the exact official endpoints `https://ascii.dev/api/box/v1` and
-`https://api.vercel.com/`. Status never prints credentials. Logout removes
-local settings and both keyring entries but does not alter remote resources or
+the exact official direct-provider endpoints `https://ascii.dev/api/box/v1` and
+`https://api.vercel.com/`; hosted Waterbox is pinned to `https://api.waterbox.ai/`.
+Interactive setup shows hosted Waterbox only when its public capability document
+advertises availability. Existing hosted keyring configuration and explicit
+`WATERBOX_PROVIDER=waterbox` environment configuration remain valid independently.
+`FORCE_DISPLAY_WATERBOX=1` is a development/debug override that shows it without
+fetching capabilities.
+Status never prints credentials. Logout removes local settings and all three
+keyring entries but does not alter remote resources or
 the SQLite resource registry.
 
 For headless systems without a usable keyring, place a complete provider
@@ -35,12 +41,16 @@ configuration in the MCP client's environment/secret facility. Do not put
 secrets in command arguments:
 
 ```text
-Box:    WATERBOX_PROVIDER=box, BOX_API_KEY=<client-managed secret>
+Waterbox: WATERBOX_PROVIDER=waterbox, WATERBOX_API_KEY=<client-managed secret>
+Box:    WATERBOX_PROVIDER=box, BOX_API_KEY=<client-managed secret>,
+        WATERBOX_AUTO_STOP=40m
 Vercel: WATERBOX_PROVIDER=vercel, VERCEL_TOKEN=<client-managed secret>,
-        VERCEL_TEAM_ID=<team identifier>, VERCEL_PROJECT_ID=<project identifier>
+        VERCEL_TEAM_ID=<team identifier>, VERCEL_PROJECT_ID=<project identifier>,
+        WATERBOX_AUTO_STOP=40m
 ```
 
-Custom Box/Vercel endpoints are supported only when the complete provider
+Hosted Waterbox always targets `https://api.waterbox.ai/`. Custom Box/Vercel
+endpoints are supported only when the complete provider
 selection and credentials come from process environment. Environment and
 persisted sources are never mixed. `.env` is never loaded implicitly.
 
@@ -51,7 +61,9 @@ tools before filesystem, SQLite, artifact, or provider I/O.
 
 | Variable | Required | Default |
 | --- | --- | --- |
-| `WATERBOX_PROVIDER` | Environment setup: `box` or `vercel` | none |
+| `WATERBOX_PROVIDER` | Environment setup: `waterbox`, `box`, or `vercel` | none |
+| `WATERBOX_API_KEY` | Hosted Waterbox environment setup | none |
+| `FORCE_DISPLAY_WATERBOX` | Development/debug interactive-setup override; only `1` enables it | none |
 | `BOX_API_KEY` | Box environment setup | none |
 | `BOX_API_BASE_URL` | Environment-only override | `https://ascii.dev/api/box/v1` |
 | `BOX_POLL_INTERVAL_MS` | No | `1000` |
@@ -63,19 +75,20 @@ tools before filesystem, SQLite, artifact, or provider I/O.
 | `VERCEL_POLL_INTERVAL_MS` | No | `1000` |
 | `VERCEL_POLL_TIMEOUT_MS` | No | `120000` |
 | `VERCEL_REQUEST_TIMEOUT_MS` | No | `30000` |
-| `WATERBOX_AUTO_STOP` | No; whole minutes/hours such as `30m` or `2h` | provider default |
+| `WATERBOX_AUTO_STOP` | Box and Vercel environment setup; whole minutes/hours such as `40m` or `6h` | none |
 | `WATERBOX_SQLITE_PATH` | No | `~/.waterbox/direct.sqlite` |
 
 ## Lifecycle And Tools
 
 Waterbox exposes `create_sandbox`, `probe_sandbox`, `stop_sandbox`,
-`delete_sandbox`, `list_snapshots`, `create_snapshot`, `delete_snapshot`,
+`list_snapshots`, `create_snapshot`, `delete_snapshot`,
 `send_file_securely`, `read`, `write`, `edit`, `patch`, `glob`, `grep`, and
 `bash`. Resource IDs are explicit; there is no selected sandbox or
 `list_sandboxes` tool.
 
-Waterbox owns only records in its local SQLite database and does not infer
-ownership from provider inventory. Sandboxes persist after the MCP exits.
+Direct Box/Vercel mode owns only records in its local SQLite database and does
+not infer ownership from provider inventory. Hosted Waterbox records are owned
+by the hosted service. Sandboxes persist after the MCP exits.
 Changing provider scope does not migrate or clean old resources, which may
 continue to incur charges. Fresh and snapshot-sourced sandboxes receive the
 current packaged Node CLI without a shared system snapshot, Bun, or daemon.

package/dist/waterbox-cli.js

@@ -12529,6 +12529,8 @@ var NonEmptyStringSchema = external_exports.string().min(1);
 var PositiveIntegerSchema = external_exports.number().int().positive();
 var FilePathSchema = NonEmptyStringSchema.max(4096);
 var ToolNameSchema = external_exports.enum(["read", "write", "edit", "patch", "glob", "grep", "bash"]);
+var MAX_BASH_OUTPUT_BYTES = 1048576;
+var MAX_TOOL_RESULT_BYTES = 8 * 1024 * 1024;
 var BashJobIdSchema = external_exports.string().regex(/^job_[0-9a-f]{32}$/);
 var ReadToolArgumentsSchema = external_exports.object({
   filePath: FilePathSchema,
@@ -12659,12 +12661,7 @@ var BashToolResultSchema = external_exports.discriminatedUnion("outcome", [
   CompletedBashToolResultSchema,
   DispatchedBashToolResultSchema
 ]);
-var ReadToolEventSchema = ReadToolResultSchema.extend({ type: external_exports.literal("result") });
-var WriteToolEventSchema = WriteToolResultSchema.extend({ type: external_exports.literal("result") });
-var EditToolEventSchema = EditToolResultSchema.extend({ type: external_exports.literal("result") });
-var PatchToolEventSchema = PatchToolResultSchema.extend({ type: external_exports.literal("result") });
-var GlobToolEventSchema = GlobToolResultSchema.extend({ type: external_exports.literal("result") });
-var GrepToolEventSchema = GrepToolResultSchema.extend({ type: external_exports.literal("result") });
+var ToolResultSchema = external_exports.union([ReadToolResultSchema, WriteToolResultSchema, EditToolResultSchema, PatchToolResultSchema, GlobToolResultSchema, GrepToolResultSchema, BashToolResultSchema]);
 var BashToolEventSchema = external_exports.union([
   external_exports.object({ type: external_exports.literal("stdout"), data: external_exports.string() }).strict(),
   external_exports.object({ type: external_exports.literal("stderr"), data: external_exports.string() }).strict(),
@@ -13434,7 +13431,6 @@ var normalize = (value) => value.replace(/[‘’‚‛]/g, "'").replace(/[“
 var stripHeredoc = (input) => input.match(/^(?:cat\s+)?<<(['"]?)(\w+)\1\s*\n([\s\S]*?)\n\2\s*$/)?.[3] ?? input;
 
 // packages/sandbox-runtime/src/runtime.ts
-var MAX_BASH_OUTPUT_BYTES = 1048576;
 var MAX_TIMEOUT_MS = 2147483647;
 var RuntimeError = class extends Error {
   constructor(status, message) {
@@ -13952,12 +13948,12 @@ function createRuntime(options) {
       combinedSignal.throwIfAborted();
       const root = await realpath(configuredRoot);
       combinedSignal.throwIfAborted();
-      if (name === "write") return { type: "result", ...await writeTool(root, body) };
-      if (name === "edit") return { type: "result", ...await editTool(root, body) };
-      if (name === "patch") return { type: "result", ...await patchTool(root, body) };
-      if (name === "read") return { type: "result", ...await readTool(root, body) };
-      if (name === "glob") return { type: "result", ...await globTool(root, body, combinedSignal) };
-      if (name === "grep") return { type: "result", ...await grepTool(root, body, combinedSignal) };
+      if (name === "write") return await writeTool(root, body);
+      if (name === "edit") return await editTool(root, body);
+      if (name === "patch") return await patchTool(root, body);
+      if (name === "read") return await readTool(root, body);
+      if (name === "glob") return await globTool(root, body, combinedSignal);
+      if (name === "grep") return await grepTool(root, body, combinedSignal);
       return await bashTool(root, body, combinedSignal);
     },
     shutdown() {
@@ -13974,7 +13970,6 @@ import { chmod, lstat as lstat3, mkdir as mkdir2, open as open3, readFile as rea
 import { relative as relative2, resolve as resolve2, sep as sep3 } from "node:path";
 var DEFAULT_BASH_JOBS_ROOT = "/run/waterbox/bash-jobs";
 var DEFAULT_BASH_YIELD_AFTER_MS = 15e3;
-var MAX_BASH_OUTPUT_BYTES2 = 1048576;
 var MAX_STATUS_BYTES = 64 * 1024;
 function pathsFor(jobRoot, jobId) {
   if (!/^job_[0-9a-f]{32}$/.test(jobId)) throw new Error("Invalid async Bash job ID");
@@ -14218,14 +14213,13 @@ async function runOneShotBash(workspaceRoot2, input, signal, options = {}) {
       try {
         [status, output] = await Promise.all([
           readTerminalStatus(paths.statusPath),
-          readBounded(paths.outputPath, MAX_BASH_OUTPUT_BYTES2)
+          readBounded(paths.outputPath, MAX_BASH_OUTPUT_BYTES)
         ]);
       } catch {
         throw new RuntimeError(500, "Async Bash worker failed");
       }
       await rm2(paths.directory, { recursive: true, force: true }).catch(() => void 0);
       return {
-        type: "result",
         outcome: "completed",
         title: args.description ?? "Bash command",
         output: output.value || (status.timedOut ? "Command timed out" : "Command completed without output"),
@@ -14247,7 +14241,6 @@ async function runOneShotBash(workspaceRoot2, input, signal, options = {}) {
     throw error45;
   }
   return {
-    type: "result",
     outcome: "dispatched",
     title: "Bash command dispatched",
     output: "Command dispatched. statusPath reports execution state, and outputPath receives output continuously. Repeated output reads can duplicate tokens and pollute context.",
@@ -22158,19 +22151,19 @@ function isExactObject(value, keys) {
 }
 
 // packages/sandbox-cli/src/index.ts
-var eventSchemas = {
-  read: ReadToolEventSchema,
-  write: WriteToolEventSchema,
-  edit: EditToolEventSchema,
-  patch: PatchToolEventSchema,
-  glob: GlobToolEventSchema,
-  grep: GrepToolEventSchema,
-  bash: BashToolEventSchema
+var resultSchemas = {
+  read: ReadToolResultSchema,
+  write: WriteToolResultSchema,
+  edit: EditToolResultSchema,
+  patch: PatchToolResultSchema,
+  glob: GlobToolResultSchema,
+  grep: GrepToolResultSchema,
+  bash: BashToolResultSchema
 };
 async function runCli(argv2, options) {
   const io = options.io ?? { stdout: (value) => process.stdout.write(value), stderr: (value) => process.stderr.write(value) };
   if (argv2.length === 1 && argv2[0] === "health") {
-    io.stdout(`${JSON.stringify({ ok: true, protocolVersion: CLI_PROTOCOL_VERSION, tools: Object.keys(eventSchemas) })}
+    io.stdout(`${JSON.stringify({ ok: true, protocolVersion: CLI_PROTOCOL_VERSION, tools: Object.keys(resultSchemas) })}
 `);
     return 0;
   }
@@ -22243,7 +22236,7 @@ async function runCli(argv2, options) {
   if (invocation.tool === "bash") {
     try {
       const result = await runOneShotBash(options.workspaceRoot, invocation.arguments, options.signal, options.asyncBash);
-      io.stdout(`${JSON.stringify(BashToolEventSchema.parse(result))}
+      io.stdout(`${JSON.stringify(BashToolResultSchema.parse(result))}
 `);
       return 0;
     } catch (error45) {
@@ -22268,7 +22261,7 @@ async function runCli(argv2, options) {
 `);
       return 0;
     }
-    io.stdout(`${JSON.stringify(eventSchemas[invocation.tool].parse(result))}
+    io.stdout(`${JSON.stringify(resultSchemas[invocation.tool].parse(result))}
 `);
     return 0;
   } catch (error45) {