BUILDBOX-CASD-WRAP(1)

💖 NAME 💖

okay so bestie, welcome to the manual page of buildbox-casd-wrap — yes, the name is literally buildbox-casd-wrap, and it's a User Command, section 1, and we're gonna get into it. periodt.

---

🦋 SYNOPSIS 🦋

buildbox-casd-wrap

that's it. that's the whole vibe. she just runs. ✨

---

🌸 DESCRIPTION 🌸

hiii, so this is the rundown of everything you can hand her on the command line. some of these are optional (the [optional] girlies), some are VERY required ([required] — no skipping, iykyk), and a couple just do a thing and dip. let's go one by one, bestie, we're not skipping a single one 🫶

• --help — shows you the usage and then exits. like, "here's how to use me, bye 💅".
• --version — prints the version info and exits. [optional]
• --remote — the URL for all the services. one URL, every service, she's sharing. [optional]
• --instance — the instance for all the services too. [optional]
• --server-cert — the server TLS certificate for all services, and it's PEM-encoded. [optional]
• --client-key — the client private TLS key for all services, PEM-encoded as well. [optional]
• --client-cert — the client TLS certificate for all services, also PEM-encoded. [optional]
• --access-token — your authentication token for all services (JWT, OAuth token, etc etc), and it gets included as an HTTP Authorization bearer token. [optional]
• --token-reload-interval — the default access token refresh timeout. [optional]
• --googleapi-auth — use GoogleAPIAuth for all services. [optional]
• --credential-helper — the credential helper executable for all services. [optional]
• --retry-limit — how many times to retry on gRPC errors, for all services. [optional]
• --retry-delay — how long to wait between those gRPC error retries, for all services. [optional]
• --retry-on-code — the gRPC status code(s), as string(s), that you wanna retry on, for all services. e.g. 'UNKNOWN', 'INTERNAL'. [optional]
• --request-timeout — the timeout for gRPC requests for all services. set it to 0 to disable the timeout entirely. [optional]
• --min-throughput — the minimum throughput for gRPC requests for all services, measured in bytes per seconds. the value may be suffixed with K, M, G or T. [optional]
• --keepalive-time — the gRPC keepalive pings period for all services. set it to 0 and the keepalive pings are off. [optional]
• --load-balancing-policy — the gRPC load balancing policy for all services. the valid options are 'round_robin' and 'grpclb' — pick one, bestie. [optional]
• --log-level — the log level. your choices are debug, error, info, trace, warning. [optional, default = "error"]
• --verbose — sets the log level to 'debug', so basically she stops whispering and tells you everything. [optional]
• --root — the path to the sandbox root directory. for bwrap it defaults to '/proc/PID/root'. [optional]
• --socket-path — the path in the sandbox for buildbox-casd's UNIX socket. this one is REQUIRED, no cap, she will not go without it. [required]
• --clearenv — clears the environment variables. [optional, default = false]
• --clone-instance — clones a base instance under a new name in the nested server. the format is CLONE:BASE or NAME, and yes bestie it can be repeated. [optional]
• bwrap/userchroot command — this is a POSITIONAL argument and it is REQUIRED. she needs her command, okay?? [required]

🚨 reminder: --socket-path and the bwrap/userchroot command positional are the only two that are required. everything else is optional and just vibing.

---

🧚 and that's a wrap, literally 🧚

this whole thing is buildbox-casd-wrap version 1.4.16, dated August 2026, from the BUILDBOX-CASD-WRAP(1) page, User Commands section. go forth and wrap your casd, bestie, you're gonna slay 💜🌈⭐