# AMerc TinyBox standalone manual

Installer release: **0.5.203-portable**. Bundled TinyBox binary: **0.1.449-portable**. TinyBox packages contain the native consumer or donor binary and a credential-bound JSON configuration. Never publish `consumer.json` or `donor.json`.

## Consumer quick start

- Windows: download and run `install-tinybox-windows.ps1`, open a new terminal, then run `tinybox_consumer --pool claude` or `tinybox_consumer --pool codex`.
- Linux: download and run `install-tinybox-linux.sh`, then run `tinybox_consumer --pool claude` or `tinybox_consumer --pool codex`.
- The installer authenticates with AMerc over HTTPS, downloads your own package, installs the command on the user PATH, and does not save your AMerc password.
- The package probes the federation ballot itself. In China, a healthy client should display `EP:cn` or `EP:amerc-cn`; the canonical CN endpoint is `https://cn.amerc.ai`.

## Donor quick start

1. Sign in to AMerc and enable the donor role.
2. Install and sign in to Claude Code and/or Codex on the donor machine first. Only publish an agent that can complete a local test prompt.
3. Open **Services → TinyBox → Donor**, choose the matching agent configuration and operating system, then download the donor package.
4. Extract it and run `run-donor.ps1` on Windows or `./run-donor.sh` on Linux. Keep the supervisor running; it reconnects after transient relay loss.
5. In **Administration → Capacity**, verify the machine, relay node, assigned consumers, and donor-to-consumer link.

## LAN and pinned-node use

TinyBox dials outbound only; no inbound firewall rule is required. For a LAN deployment, keep the workspace/mount paths local and use the same account role token on only the machines you control. To pin China, set `siteUrl` to `https://cn.amerc.ai`, keep `sites` as an array containing that origin, and set `siteMode` to `pinned`. Use automatic mode when roaming between regions.

## Security and recovery

- Treat each role JSON file like a password. Rotate the consumer or donor token from the AMerc service page if it is disclosed.
- An Outpost local dashboard is separate from TinyBox. Standalone Outpost installers create local API login `admin / 123456` unless you choose another password; change the default immediately on shared machines.
- If a consumer cannot find capacity, check the endpoint shown in its TUI, then check the relay node and donor link in the Administration capacity page.