@boxes-dev/dvb-runtime 1.0.178 → 1.0.179

package/dist/bin/dvb.cjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 "use strict";
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a741b1b2-865d-5d60-b44d-6259dcc3a122")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1518c9c7-f041-5409-b81f-b01b956a3638")}catch(e){}}();
 
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -24219,9 +24219,9 @@ var require_is_export_retryable = __commonJS({
       if (Number.isInteger(seconds)) {
         return seconds > 0 ? seconds * 1e3 : -1;
       }
-      const delay3 = new Date(retryAfter).getTime() - Date.now();
-      if (delay3 >= 0) {
-        return delay3;
+      const delay4 = new Date(retryAfter).getTime() - Date.now();
+      if (delay4 >= 0) {
+        return delay4;
       }
       return 0;
     }
@@ -37776,17 +37776,17 @@ var require_backoff_timeout = __commonJS({
       trace(text) {
         logging.trace(constants_1.LogVerbosity.DEBUG, TRACER_NAME, "{" + this.id + "} " + text);
       }
-      runTimer(delay3) {
+      runTimer(delay4) {
         var _a3, _b2;
-        this.trace("runTimer(delay=" + delay3 + ")");
+        this.trace("runTimer(delay=" + delay4 + ")");
         this.endTime = this.startTime;
-        this.endTime.setMilliseconds(this.endTime.getMilliseconds() + delay3);
+        this.endTime.setMilliseconds(this.endTime.getMilliseconds() + delay4);
         clearTimeout(this.timerId);
         this.timerId = setTimeout(() => {
           this.trace("timer fired");
           this.running = false;
           this.callback();
-        }, delay3);
+        }, delay4);
         if (!this.hasRef) {
           (_b2 = (_a3 = this.timerId).unref) === null || _b2 === void 0 ? void 0 : _b2.call(_a3);
         }
@@ -88688,8 +88688,8 @@ var init_otel = __esm({
       return trimmed && trimmed.length > 0 ? trimmed : void 0;
     };
     readBuildMetadata = () => {
-      const rawPackageVersion = "1.0.178";
-      const rawGitSha = "fccb442a9695c60f8de7dbe528d9ef8e52b29a99";
+      const rawPackageVersion = "1.0.179";
+      const rawGitSha = "2918029200d16706902b9262d982fa8437cbb319";
       const packageVersion = typeof rawPackageVersion === "string" ? rawPackageVersion : void 0;
       const gitSha = typeof rawGitSha === "string" ? rawGitSha : void 0;
       return { packageVersion, gitSha };
@@ -95020,17 +95020,17 @@ function updateRateLimits(limits, { statusCode, headers }, now = safeDateNow())
     for (const limit of rateLimitHeader.trim().split(",")) {
       const [retryAfter, categories, , , namespaces] = limit.split(":", 5);
       const headerDelay = parseInt(retryAfter, 10);
-      const delay3 = (!isNaN(headerDelay) ? headerDelay : 60) * 1e3;
+      const delay4 = (!isNaN(headerDelay) ? headerDelay : 60) * 1e3;
       if (!categories) {
-        updatedRateLimits.all = now + delay3;
+        updatedRateLimits.all = now + delay4;
       } else {
         for (const category of categories.split(";")) {
           if (category === "metric_bucket") {
             if (!namespaces || namespaces.split(";").includes("custom")) {
-              updatedRateLimits[category] = now + delay3;
+              updatedRateLimits[category] = now + delay4;
             }
           } else {
-            updatedRateLimits[category] = now + delay3;
+            updatedRateLimits[category] = now + delay4;
           }
         }
       }
@@ -120881,9 +120881,9 @@ var init_sentry = __esm({
     sentryEnabled = false;
     uncaughtExceptionMonitorInstalled = false;
     readBuildMetadata2 = () => {
-      const rawPackageVersion = "1.0.178";
-      const rawGitSha = "fccb442a9695c60f8de7dbe528d9ef8e52b29a99";
-      const rawSentryRelease = "boxes-dev-dvb@1.0.178+fccb442a9695c60f8de7dbe528d9ef8e52b29a99";
+      const rawPackageVersion = "1.0.179";
+      const rawGitSha = "2918029200d16706902b9262d982fa8437cbb319";
+      const rawSentryRelease = "boxes-dev-dvb@1.0.179+2918029200d16706902b9262d982fa8437cbb319";
       const packageVersion = typeof rawPackageVersion === "string" ? rawPackageVersion : void 0;
       const gitSha = typeof rawGitSha === "string" ? rawGitSha : void 0;
       const sentryRelease = typeof rawSentryRelease === "string" ? rawSentryRelease : void 0;
@@ -124880,7 +124880,7 @@ var init_packageVersion = __esm({
       return import_node_path8.default.join(process.cwd(), "dvb");
     };
     readEmbeddedPackageVersion = () => {
-      const raw = "1.0.178";
+      const raw = "1.0.179";
       return trimVersion(raw);
     };
     readNearestPackageMetadata = (basePath) => {
@@ -130560,27 +130560,27 @@ var init_authentication_manager = __esm({
           );
           return;
         }
-        let delay3 = Math.min(
+        let delay4 = Math.min(
           MAXIMUM_REFRESH_DELAY,
           (tokenValiditySeconds - this.refreshTokenLeewaySeconds) * 1e3
         );
-        if (delay3 <= 0) {
+        if (delay4 <= 0) {
           this.logger.warn(
             `Refetching auth token immediately, configured leeway ${this.refreshTokenLeewaySeconds}s is larger than the token's lifetime ${tokenValiditySeconds}s`
           );
-          delay3 = 0;
+          delay4 = 0;
         }
         const refetchTokenTimeoutId = setTimeout(() => {
           this._logVerbose("running scheduled token refetch");
           void this.refetchToken();
-        }, delay3);
+        }, delay4);
         this.setAuthState({
           state: "waitingForScheduledRefetch",
           refetchTokenTimeoutId,
           config: this.authState.config
         });
         this._logVerbose(
-          `scheduled preemptive auth token refetching in ${delay3}ms`
+          `scheduled preemptive auth token refetching in ${delay4}ms`
         );
       }
       // Protects against simultaneous calls to `setConfig`
@@ -151730,7 +151730,7 @@ var require_delay = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.delay = void 0;
     var execute_1 = require_execute();
-    function delay3(signal, dueTime) {
+    function delay4(signal, dueTime) {
       return (0, execute_1.execute)(signal, (resolve2) => {
         const ms = typeof dueTime === "number" ? dueTime : dueTime.getTime() - Date.now();
         const timer = setTimeout(resolve2, ms);
@@ -151739,7 +151739,7 @@ var require_delay = __commonJS({
         };
       });
     }
-    exports2.delay = delay3;
+    exports2.delay = delay4;
   }
 });
 
@@ -204017,7 +204017,7 @@ ${result.exception}`
       async #put(values, timeoutMs, partition, partitionTtlMs) {
         const valuesEncoded = values.map((v2) => dumps(v2));
         const partitionKey = _Queue.#validatePartitionKey(partition);
-        let delay3 = queueInitialPutBackoffMs;
+        let delay4 = queueInitialPutBackoffMs;
         const deadline = timeoutMs ? Date.now() + timeoutMs : void 0;
         while (true) {
           try {
@@ -204030,14 +204030,14 @@ ${result.exception}`
             break;
           } catch (e2) {
             if (e2 instanceof import_nice_grpc9.ClientError && e2.code === import_nice_grpc9.Status.RESOURCE_EXHAUSTED) {
-              delay3 = Math.min(delay3 * 2, 3e4);
+              delay4 = Math.min(delay4 * 2, 3e4);
               if (deadline !== void 0) {
                 const remaining = deadline - Date.now();
                 if (remaining <= 0)
                   throw new QueueFullError(`Put failed on ${this.queueId}.`);
-                delay3 = Math.min(delay3, remaining);
+                delay4 = Math.min(delay4, remaining);
               }
-              await new Promise((resolve2) => setTimeout(resolve2, delay3));
+              await new Promise((resolve2) => setTimeout(resolve2, delay4));
             } else {
               throw e2;
             }
@@ -204967,9 +204967,9 @@ ${result.exception}`
         while (this.running) {
           const now = Math.floor(Date.now() / 1e3);
           const refreshTime = this.tokenExpiry - REFRESH_WINDOW;
-          const delay3 = Math.max(0, refreshTime - now) * 1e3;
+          const delay4 = Math.max(0, refreshTime - now) * 1e3;
           await new Promise((resolve2) => {
-            this.timeoutId = setTimeout(resolve2, delay3);
+            this.timeoutId = setTimeout(resolve2, delay4);
             this.timeoutId.unref();
           });
           if (!this.running) {
@@ -208682,8 +208682,8 @@ var init_connect2 = __esm({
           pendingPortLogs.set(event.port, token);
           const delays = [30, 60, 120, 200];
           void (async () => {
-            for (const delay3 of delays) {
-              await new Promise((resolve2) => setTimeout(resolve2, delay3));
+            for (const delay4 of delays) {
+              await new Promise((resolve2) => setTimeout(resolve2, delay4));
               if (pendingPortLogs.get(event.port) !== token) {
                 return;
               }
@@ -214974,15 +214974,76 @@ var init_prompts = __esm({
   }
 });
 
+// src/devbox/commands/init/codex/events.ts
+var stripAnsi2, extractBoldText, normalizeProgressMessage, toRecord, extractProgressFromJsonLine, extractThreadIdFromJsonLine;
+var init_events = __esm({
+  "src/devbox/commands/init/codex/events.ts"() {
+    "use strict";
+    stripAnsi2 = (value) => value.replace(/\u001b\[[0-9;]*[A-Za-z]/g, "");
+    extractBoldText = (line) => {
+      const match2 = line.match(/\*\*([^*]+)\*\*/);
+      const text = match2?.[1];
+      return text ? text.trim() : null;
+    };
+    normalizeProgressMessage = (value) => {
+      if (!value) return null;
+      const normalized = value.replace(/\s+/g, " ").trim();
+      if (!normalized) return null;
+      if (normalized.length > 140) return null;
+      if (!/[A-Za-z]/.test(normalized)) return null;
+      if (/\\[nrt"\\]/.test(normalized)) return null;
+      if (/[\[\]{}]/.test(normalized)) return null;
+      return normalized;
+    };
+    toRecord = (value) => typeof value === "object" && value !== null ? value : null;
+    extractProgressFromJsonLine = (line) => {
+      const trimmed = line.trim();
+      if (!trimmed.startsWith("{")) return null;
+      let parsed;
+      try {
+        parsed = JSON.parse(trimmed);
+      } catch {
+        return null;
+      }
+      const record = toRecord(parsed);
+      if (!record) return null;
+      if (record.type === "reasoning") {
+        return normalizeProgressMessage(
+          extractBoldText(String(record.text ?? "")) ?? String(record.text ?? "")
+        );
+      }
+      const item = toRecord(record.item);
+      if (!item || item.type !== "reasoning") return null;
+      return normalizeProgressMessage(
+        extractBoldText(String(item.text ?? "")) ?? String(item.text ?? "")
+      );
+    };
+    extractThreadIdFromJsonLine = (line) => {
+      const trimmed = line.trim();
+      if (!trimmed.startsWith("{")) return null;
+      let parsed;
+      try {
+        parsed = JSON.parse(trimmed);
+      } catch {
+        return null;
+      }
+      const record = toRecord(parsed);
+      if (!record || record.type !== "thread.started") return null;
+      const threadId2 = record.thread_id;
+      return typeof threadId2 === "string" && threadId2.length > 0 ? threadId2 : null;
+    };
+  }
+});
+
 // src/devbox/commands/init/codex/remote.ts
-var import_node_child_process11, stripAnsi2, decodeBase643, parseExitCode2, parseRemoteExecMessage, extractBoldText, extractAuthUrl, extractLocalPort, isRelayForbidden, isRelayMissingOpenAiProxyConfiguration, summarizeExecOutput, buildEntrypointsBlock, resolveRemoteApplyTemplateName, renderRemoteApplyPromptFromTemplate, renderRemoteApplyPrompt, openBrowser3, ensureRemoteCodexInstalled, isRemoteCodexLoggedIn, runRemoteCodexLogin, runRemoteCodexExec;
+var import_node_child_process11, decodeBase643, parseExitCode2, parseRemoteExecMessage, extractAuthUrl, extractLocalPort, summarizeExecOutput, buildEntrypointsBlock, resolveRemoteApplyTemplateName, renderRemoteApplyPromptFromTemplate, renderRemoteApplyPrompt, openBrowser3, ensureRemoteCodexInstalled, isRemoteCodexLoggedIn, runRemoteCodexLogin, runRemoteCodexExec;
 var init_remote2 = __esm({
   "src/devbox/commands/init/codex/remote.ts"() {
     "use strict";
     import_node_child_process11 = require("node:child_process");
     init_prompts();
     init_template();
-    stripAnsi2 = (value) => value.replace(/\u001b\[[0-9;]*[A-Za-z]/g, "");
+    init_events();
     decodeBase643 = (value) => {
       if (typeof value !== "string") return Buffer.alloc(0);
       try {
@@ -215039,11 +215100,6 @@ var init_remote2 = __esm({
       }
       return { kind: "raw" };
     };
-    extractBoldText = (line) => {
-      const match2 = line.match(/\*\*([^*]+)\*\*/);
-      const text = match2?.[1];
-      return text ? text.trim() : null;
-    };
     extractAuthUrl = (value) => {
       const match2 = value.match(
         /https:\/\/auth\.openai\.com\/oauth\/authorize[^\s]+/
@@ -215063,8 +215119,6 @@ var init_remote2 = __esm({
       }
       return null;
     };
-    isRelayForbidden = (value) => /(unexpected status 403 Forbidden|403 Forbidden: forbidden)/i.test(value) && /\/v1\/responses/i.test(value);
-    isRelayMissingOpenAiProxyConfiguration = (value) => /unexpected status 503 Service Unavailable/i.test(value) && /missing OpenAI proxy configuration/i.test(value) && /\/v1\/responses/i.test(value);
     summarizeExecOutput = (stderr, stdout) => {
       const summarize = (value) => {
         const cleaned = stripAnsi2(value);
@@ -215499,7 +215553,7 @@ fi`
       cmd,
       tty: tty2,
       onProgress
-    }) => new Promise((resolve2, reject) => {
+    }) => new Promise((resolve2) => {
       const ws = client2.openExecSession(spriteAlias, {
         cmd,
         tty: tty2 ?? false,
@@ -215512,10 +215566,25 @@ fi`
       let exitCode = null;
       let resolved = false;
       let lastProgress = null;
+      let threadId2 = null;
       const handleLine = (line) => {
-        if (!onProgress) return;
         const clean = stripAnsi2(line);
-        const bold = extractBoldText(clean);
+        if (!threadId2) {
+          const parsedThreadId = extractThreadIdFromJsonLine(clean);
+          if (parsedThreadId) {
+            threadId2 = parsedThreadId;
+          }
+        }
+        if (!onProgress) return;
+        const parsed = extractProgressFromJsonLine(clean);
+        if (parsed) {
+          if (parsed === lastProgress) return;
+          lastProgress = parsed;
+          onProgress(parsed);
+          return;
+        }
+        if (clean.trimStart().startsWith("{")) return;
+        const bold = normalizeProgressMessage(extractBoldText(clean));
         if (!bold || bold === lastProgress) return;
         lastProgress = bold;
         onProgress(bold);
@@ -215654,46 +215723,11 @@ fi`
         if (stderrBuffer) {
           handleLine(stderrBuffer);
         }
-        if (code2 === null) {
-          const detail2 = summarizeExecOutput(stderr, stdout);
-          const suffix2 = detail2 ? `: ${detail2}` : "";
-          reject(
-            new Error(
-              `codex exec failed: remote exec stream closed before exit status${suffix2}`
-            )
-          );
-          return;
-        }
-        const finalCode = code2;
-        if (finalCode === 0) {
-          resolve2({ stdout, stderr });
-          return;
-        }
-        if (isRelayForbidden(`${stderr}
-${stdout}`)) {
-          reject(
-            new Error(
-              "codex exec failed: relay proxy returned 403 forbidden. Run `dvb setup --codex-auth byo` and retry with `dvb init --resume`."
-            )
-          );
-          return;
-        }
-        if (isRelayMissingOpenAiProxyConfiguration(`${stderr}
-${stdout}`)) {
-          reject(
-            new Error(
-              "codex exec failed: relay proxy is missing OPENAI_API_KEY configuration. Re-run `just dev` so the relay tunnel deploy includes OPENAI_API_KEY, then retry with `dvb init --resume`."
-            )
-          );
-          return;
-        }
-        const detail = summarizeExecOutput(stderr, stdout);
-        const suffix = detail ? `: ${detail}` : "";
-        reject(new Error(`codex exec failed (exit ${finalCode})${suffix}`));
+        resolve2({ stdout, stderr, exitCode: code2, threadId: threadId2 });
       };
       ws.addEventListener("message", onMessage);
       ws.addEventListener("close", () => finish(exitCode));
-      ws.addEventListener("error", () => finish(exitCode ?? 1));
+      ws.addEventListener("error", () => finish(exitCode));
     });
   }
 });
@@ -215937,6 +215971,29 @@ var init_proxy2 = __esm({
   }
 });
 
+// src/devbox/commands/init/codex/retry.ts
+var DEFAULT_CODEX_EXEC_MAX_ATTEMPTS, delay2, computeCodexExecRetryDelayMs, RetryableCodexExecError;
+var init_retry = __esm({
+  "src/devbox/commands/init/codex/retry.ts"() {
+    "use strict";
+    DEFAULT_CODEX_EXEC_MAX_ATTEMPTS = 3;
+    delay2 = async (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
+    computeCodexExecRetryDelayMs = (attempt) => {
+      const baseMs = 1e3;
+      const capMs = 8e3;
+      return Math.min(capMs, baseMs * 2 ** Math.max(0, attempt - 1));
+    };
+    RetryableCodexExecError = class extends Error {
+      sessionId;
+      constructor(message, sessionId) {
+        super(message);
+        this.name = "RetryableCodexExecError";
+        this.sessionId = sessionId;
+      }
+    };
+  }
+});
+
 // src/devbox/commands/init/clack.ts
 var import_node_util4, apply, wrapLine, DEFAULT_MULTISELECT_HELP, multiselectWithHelp;
 var init_clack = __esm({
@@ -216080,7 +216137,7 @@ ${bottom}
 });
 
 // src/devbox/commands/init/codex/local.ts
-var import_node_child_process12, import_node_fs10, import_promises25, import_node_os15, import_node_path29, stripAnsi3, extractBoldText2, normalizeProgressMessage, toRecord, extractProgressFromJsonLine, extractThreadIdFromJsonLine, isRelayUsageLimitExceeded, isRelayForbidden2, isRelayMissingOpenAiProxyConfiguration2, CODEX_REQUEST_URL_REGEX, extractRequestUrl, isStreamDisconnected, isLoopbackRelayUrl, buildRetryPrompt, runCodexExec, runLocalSetupEnvSecretsScan, runLocalSetupExternalScan, runLocalSetupExtraArtifactsScan, runLocalServicesScan, toPosixPath, toRepoRelativePath, countSecretVars, buildEnvFileHint, buildExternalDependencyLabel, promptForPlanApproval, promptForServicesApproval;
+var import_node_child_process12, import_node_fs10, import_promises25, import_node_os15, import_node_path29, isRelayUsageLimitExceeded, isRelayForbidden, isRelayMissingOpenAiProxyConfiguration, CODEX_REQUEST_URL_REGEX, extractRequestUrl, isStreamDisconnected, isLoopbackRelayUrl, buildRetryPrompt, parseCodexExecArgs, buildCodexExecArgs, formatCodexRetryProgress, runCodexExec, runLocalSetupEnvSecretsScan, runLocalSetupExternalScan, runLocalSetupExtraArtifactsScan, runLocalServicesScan, toPosixPath, toRepoRelativePath, countSecretVars, buildEnvFileHint, buildExternalDependencyLabel, promptForPlanApproval, promptForServicesApproval;
 var init_local = __esm({
   "src/devbox/commands/init/codex/local.ts"() {
     "use strict";
@@ -216093,63 +216150,12 @@ var init_local = __esm({
     init_prompts();
     init_proxy2();
     init_execConfig();
+    init_events();
+    init_retry();
     init_clack();
-    stripAnsi3 = (value) => value.replace(/\u001b\[[0-9;]*[A-Za-z]/g, "");
-    extractBoldText2 = (line) => {
-      const match2 = line.match(/\*\*([^*]+)\*\*/);
-      const text = match2?.[1];
-      return text ? text.trim() : null;
-    };
-    normalizeProgressMessage = (value) => {
-      if (!value) return null;
-      const normalized = value.replace(/\s+/g, " ").trim();
-      if (!normalized) return null;
-      if (normalized.length > 140) return null;
-      if (!/[A-Za-z]/.test(normalized)) return null;
-      if (/\\[nrt"\\]/.test(normalized)) return null;
-      if (/[\[\]{}]/.test(normalized)) return null;
-      return normalized;
-    };
-    toRecord = (value) => typeof value === "object" && value !== null ? value : null;
-    extractProgressFromJsonLine = (line) => {
-      const trimmed = line.trim();
-      if (!trimmed.startsWith("{")) return null;
-      let parsed;
-      try {
-        parsed = JSON.parse(trimmed);
-      } catch {
-        return null;
-      }
-      const record = toRecord(parsed);
-      if (!record) return null;
-      if (record.type === "reasoning") {
-        return normalizeProgressMessage(
-          extractBoldText2(String(record.text ?? "")) ?? String(record.text ?? "")
-        );
-      }
-      const item = toRecord(record.item);
-      if (!item || item.type !== "reasoning") return null;
-      return normalizeProgressMessage(
-        extractBoldText2(String(item.text ?? "")) ?? String(item.text ?? "")
-      );
-    };
-    extractThreadIdFromJsonLine = (line) => {
-      const trimmed = line.trim();
-      if (!trimmed.startsWith("{")) return null;
-      let parsed;
-      try {
-        parsed = JSON.parse(trimmed);
-      } catch {
-        return null;
-      }
-      const record = toRecord(parsed);
-      if (!record || record.type !== "thread.started") return null;
-      const threadId2 = record.thread_id;
-      return typeof threadId2 === "string" && threadId2.length > 0 ? threadId2 : null;
-    };
     isRelayUsageLimitExceeded = (value) => /usage limit exceeded/i.test(value) && /(?:relay\.boxes\.dev\/v1\/responses|\/v1\/responses)/i.test(value);
-    isRelayForbidden2 = (value) => /(unexpected status 403 Forbidden|403 Forbidden: forbidden)/i.test(value) && /\/v1\/responses/i.test(value);
-    isRelayMissingOpenAiProxyConfiguration2 = (value) => /unexpected status 503 Service Unavailable/i.test(value) && /missing OpenAI proxy configuration/i.test(value) && /\/v1\/responses/i.test(value);
+    isRelayForbidden = (value) => /(unexpected status 403 Forbidden|403 Forbidden: forbidden)/i.test(value) && /\/v1\/responses/i.test(value);
+    isRelayMissingOpenAiProxyConfiguration = (value) => /unexpected status 503 Service Unavailable/i.test(value) && /missing OpenAI proxy configuration/i.test(value) && /\/v1\/responses/i.test(value);
     CODEX_REQUEST_URL_REGEX = /error sending request for url \(([^)]+)\)/i;
     extractRequestUrl = (value) => {
       const match2 = value.match(CODEX_REQUEST_URL_REGEX);
@@ -216173,12 +216179,58 @@ var init_local = __esm({
       "",
       "Re-run the scan and return corrected JSON."
     ].filter((line) => line.length > 0).join("\n") : basePrompt;
+    parseCodexExecArgs = (args) => {
+      if (args.length === 0) {
+        throw new Error("Missing Codex exec prompt.");
+      }
+      if (args[0] === "resume") {
+        if (args.length < 4) {
+          throw new Error("Invalid Codex resume exec arguments.");
+        }
+        const prompt2 = args.at(-1);
+        const resumeThreadId = args.at(-2);
+        if (!prompt2 || !resumeThreadId) {
+          throw new Error("Invalid Codex resume exec arguments.");
+        }
+        return {
+          sharedArgs: args.slice(1, -2),
+          prompt: prompt2,
+          resumeThreadId
+        };
+      }
+      const prompt = args.at(-1);
+      if (!prompt) {
+        throw new Error("Missing Codex exec prompt.");
+      }
+      return {
+        sharedArgs: args.slice(0, -1),
+        prompt,
+        resumeThreadId: null
+      };
+    };
+    buildCodexExecArgs = ({
+      sharedArgs,
+      prompt,
+      resumeThreadId
+    }) => resumeThreadId ? ["resume", ...sharedArgs, resumeThreadId, prompt] : [...sharedArgs, prompt];
+    formatCodexRetryProgress = ({
+      attempt,
+      maxAttempts,
+      delayMs,
+      sessionId
+    }) => {
+      const nextAttempt = attempt + 1;
+      const delaySeconds = Math.max(1, Math.ceil(delayMs / 1e3));
+      const mode = sessionId ? "continuing existing session" : "starting a fresh session";
+      return `retry ${nextAttempt}/${maxAttempts} in ${delaySeconds}s (${mode})`;
+    };
     runCodexExec = async (cwd, args, onProgress, logOptions = {}) => {
       const {
         stdoutLogPath,
         stderrLogPath,
         proxyOptions,
-        trustedPaths = []
+        trustedPaths = [],
+        onRetry
       } = logOptions;
       let stdoutStream = null;
       let stderrStream = null;
@@ -216234,10 +216286,13 @@ var init_local = __esm({
         await new Promise((resolve2) => stream.end(() => resolve2()));
       };
       try {
-        return await new Promise((resolve2, reject) => {
+        const baseArgs = parseCodexExecArgs(args);
+        let resumeThreadId = baseArgs.resumeThreadId;
+        let prompt = baseArgs.prompt;
+        const runAttempt = async (attemptArgs, attemptResumeThreadId) => await new Promise((resolve2, reject) => {
           const child = (0, import_node_child_process12.spawn)(
             "codex",
-            ["-a", "never", "exec", ...buildCodexInitExecArgs(), ...args],
+            ["-a", "never", "exec", ...buildCodexInitExecArgs(), ...attemptArgs],
             {
               cwd,
               env: childEnv,
@@ -216251,7 +216306,7 @@ var init_local = __esm({
           let lastProgress = null;
           let threadId2 = null;
           const handleLine = (line) => {
-            const clean = stripAnsi3(line);
+            const clean = stripAnsi2(line);
             if (!threadId2) {
               const parsedThreadId = extractThreadIdFromJsonLine(clean);
               if (parsedThreadId) {
@@ -216267,7 +216322,7 @@ var init_local = __esm({
               return;
             }
             if (clean.trimStart().startsWith("{")) return;
-            const bold = normalizeProgressMessage(extractBoldText2(clean));
+            const bold = normalizeProgressMessage(extractBoldText(clean));
             if (!bold || bold === lastProgress) return;
             lastProgress = bold;
             onProgress(bold);
@@ -216302,12 +216357,13 @@ var init_local = __esm({
             if (stdoutBuffer) handleLine(stdoutBuffer);
             if (stderrBuffer) handleLine(stderrBuffer);
             if (code2 === 0) {
-              resolve2({ threadId: threadId2 });
+              resolve2({ threadId: threadId2 ?? attemptResumeThreadId });
               return;
             }
             const combinedOutput = `${stderr}
 ${stdout}`;
             const detail = stderr.trim() || stdout.trim();
+            const sessionId = threadId2 ?? attemptResumeThreadId;
             if (isRelayUsageLimitExceeded(combinedOutput)) {
               reject(
                 new Error(
@@ -216316,7 +216372,7 @@ ${stdout}`;
               );
               return;
             }
-            if (isRelayForbidden2(combinedOutput)) {
+            if (isRelayForbidden(combinedOutput)) {
               reject(
                 new Error(
                   "Codex scan failed: relay proxy returned 403 forbidden. If you're using a dev/local relay config, keep local scans on that relay or run `dvb setup --codex-auth byo`, then retry with `dvb init --resume`."
@@ -216324,7 +216380,7 @@ ${stdout}`;
               );
               return;
             }
-            if (isRelayMissingOpenAiProxyConfiguration2(combinedOutput)) {
+            if (isRelayMissingOpenAiProxyConfiguration(combinedOutput)) {
               reject(
                 new Error(
                   "Codex scan failed: relay proxy is missing OPENAI_API_KEY configuration. Re-run `just dev` so the relay tunnel deploy includes OPENAI_API_KEY, then retry with `dvb init --resume`."
@@ -216344,8 +216400,27 @@ ${stdout}`;
               }
               const requestTarget = requestUrl ?? "relay /v1/responses endpoint";
               reject(
-                new Error(
-                  `Codex scan failed: transport disconnected while calling ${requestTarget}. Check relay health/auth and retry with \`dvb init --resume\`.`
+                new RetryableCodexExecError(
+                  `Codex scan failed: transport disconnected while calling ${requestTarget}. Check relay health/auth and retry with \`dvb init --resume\`.`,
+                  sessionId
+                )
+              );
+              return;
+            }
+            if (/no last agent message/i.test(combinedOutput)) {
+              reject(
+                new RetryableCodexExecError(
+                  "Codex scan failed: Codex session ended without a final response. Retry with `dvb init --resume`.",
+                  sessionId
+                )
+              );
+              return;
+            }
+            if (code2 === null) {
+              reject(
+                new RetryableCodexExecError(
+                  "Codex scan failed: Codex session ended before reporting an exit status. Retry with `dvb init --resume`.",
+                  sessionId
                 )
               );
               return;
@@ -216356,6 +216431,31 @@ ${stdout}`;
             );
           });
         });
+        for (let attempt = 1; attempt <= DEFAULT_CODEX_EXEC_MAX_ATTEMPTS; attempt += 1) {
+          const attemptArgs = buildCodexExecArgs({
+            sharedArgs: baseArgs.sharedArgs,
+            prompt,
+            resumeThreadId
+          });
+          try {
+            return await runAttempt(attemptArgs, resumeThreadId);
+          } catch (error2) {
+            if (!(error2 instanceof RetryableCodexExecError) || attempt >= DEFAULT_CODEX_EXEC_MAX_ATTEMPTS) {
+              throw error2;
+            }
+            resumeThreadId = error2.sessionId ?? resumeThreadId;
+            const delayMs = computeCodexExecRetryDelayMs(attempt);
+            await onRetry?.({
+              attempt,
+              maxAttempts: DEFAULT_CODEX_EXEC_MAX_ATTEMPTS,
+              delayMs,
+              sessionId: resumeThreadId
+            });
+            await delay2(delayMs);
+            prompt = resumeThreadId ? "continue" : baseArgs.prompt;
+          }
+        }
+        throw new Error("Codex exec failed after retries.");
       } finally {
         await Promise.all([closeStream(stdoutStream), closeStream(stderrStream)]);
         if (tempCodexHome) {
@@ -216427,7 +216527,12 @@ ${stdout}`;
         stdoutLogPath,
         stderrLogPath,
         ...proxyOptions ? { proxyOptions } : {},
-        trustedPaths: [cwd]
+        trustedPaths: [cwd],
+        ...onProgress ? {
+          onRetry: (info) => {
+            onProgress(formatCodexRetryProgress(info));
+          }
+        } : {}
       });
       return result.threadId;
     };
@@ -216497,7 +216602,12 @@ ${stdout}`;
         stdoutLogPath,
         stderrLogPath,
         ...proxyOptions ? { proxyOptions } : {},
-        trustedPaths: homeDir2 ? [cwd, homeDir2] : [cwd]
+        trustedPaths: homeDir2 ? [cwd, homeDir2] : [cwd],
+        ...onProgress ? {
+          onRetry: (info) => {
+            onProgress(formatCodexRetryProgress(info));
+          }
+        } : {}
       });
       return result.threadId;
     };
@@ -216565,7 +216675,12 @@ ${stdout}`;
         stdoutLogPath,
         stderrLogPath,
         ...proxyOptions ? { proxyOptions } : {},
-        trustedPaths: [cwd]
+        trustedPaths: [cwd],
+        ...onProgress ? {
+          onRetry: (info) => {
+            onProgress(formatCodexRetryProgress(info));
+          }
+        } : {}
       });
       return result.threadId;
     };
@@ -216635,7 +216750,12 @@ ${stdout}`;
         stdoutLogPath,
         stderrLogPath,
         ...proxyOptions ? { proxyOptions } : {},
-        trustedPaths: homeDir2 ? [cwd, homeDir2] : [cwd]
+        trustedPaths: homeDir2 ? [cwd, homeDir2] : [cwd],
+        ...onProgress ? {
+          onRetry: (info) => {
+            onProgress(formatCodexRetryProgress(info));
+          }
+        } : {}
       });
       return result.threadId;
     };
@@ -217103,7 +217223,7 @@ var init_artifacts = __esm({
 });
 
 // src/devbox/commands/init/codex/index.ts
-var import_node_path31, import_node_crypto16, import_promises27, import_node_os17, CODEX_REQUEST_URL_REGEX2, CODEX_STREAM_DISCONNECT_DETAIL_REGEX, CODEX_SESSION_ID_REGEX, extractRequestUrl2, extractStreamDisconnectDetail, extractCodexSessionId, summarizeCodexOutputDetail, summarizeCodexFailureDetail, isLoopbackRelayUrl2, resolveLocalCodexAuthPathCandidates, readLocalCodexAuthCache, syncLocalCodexAuthCacheToSprite, uploadSetupPlan, runRemoteCodexSetup;
+var import_node_path31, import_node_crypto16, import_promises27, import_node_os17, CODEX_REQUEST_URL_REGEX2, CODEX_STREAM_DISCONNECT_DETAIL_REGEX, CODEX_SESSION_ID_REGEX, REMOTE_RELAY_FORBIDDEN_REGEX, REMOTE_RELAY_MISSING_OPENAI_CONFIG_REGEX, extractRequestUrl2, extractStreamDisconnectDetail, extractCodexSessionId, summarizeCodexOutputDetail, summarizeCodexFailureDetail, isRelayForbidden2, isRelayMissingOpenAiProxyConfiguration2, formatCodexRetryProgress2, classifyRemoteCodexSetupFailure, isLoopbackRelayUrl2, resolveLocalCodexAuthPathCandidates, readLocalCodexAuthCache, syncLocalCodexAuthCacheToSprite, uploadSetupPlan, runRemoteCodexSetup;
 var init_codex = __esm({
   "src/devbox/commands/init/codex/index.ts"() {
     "use strict";
@@ -217123,9 +217243,12 @@ var init_codex = __esm({
     init_proxy2();
     init_artifacts();
     init_progress();
+    init_retry();
     CODEX_REQUEST_URL_REGEX2 = /error sending request for url \(([^)]+)\)/i;
     CODEX_STREAM_DISCONNECT_DETAIL_REGEX = /stream disconnected before completion:\s*([^\n\r]+)/i;
     CODEX_SESSION_ID_REGEX = /session id:\s*([0-9a-f-]{20,})/i;
+    REMOTE_RELAY_FORBIDDEN_REGEX = /(unexpected status 403 Forbidden|403 Forbidden: forbidden)/i;
+    REMOTE_RELAY_MISSING_OPENAI_CONFIG_REGEX = /unexpected status 503 Service Unavailable/i;
     extractRequestUrl2 = (value) => {
       const match2 = value.match(CODEX_REQUEST_URL_REGEX2);
       const url = match2?.[1]?.trim();
@@ -217151,12 +217274,13 @@ var init_codex = __esm({
     };
     summarizeCodexFailureDetail = ({
       combinedOutputRaw,
-      lastMessageReadError
+      lastMessageReadError,
+      sessionId
     }) => {
       const parts = [];
-      const sessionId = extractCodexSessionId(combinedOutputRaw);
-      if (sessionId) {
-        parts.push(`session id: ${sessionId}`);
+      const resolvedSessionId = sessionId ?? extractCodexSessionId(combinedOutputRaw);
+      if (resolvedSessionId) {
+        parts.push(`session id: ${resolvedSessionId}`);
       }
       const outputDetail = summarizeCodexOutputDetail(combinedOutputRaw);
       if (outputDetail) {
@@ -217169,6 +217293,143 @@ var init_codex = __esm({
       if (parts.length === 0) return null;
       return parts.join(" | ");
     };
+    isRelayForbidden2 = (value) => REMOTE_RELAY_FORBIDDEN_REGEX.test(value) && /\/v1\/responses/i.test(value);
+    isRelayMissingOpenAiProxyConfiguration2 = (value) => REMOTE_RELAY_MISSING_OPENAI_CONFIG_REGEX.test(value) && /missing OpenAI proxy configuration/i.test(value) && /\/v1\/responses/i.test(value);
+    formatCodexRetryProgress2 = ({
+      attempt,
+      maxAttempts,
+      delayMs,
+      sessionId
+    }) => {
+      const nextAttempt = attempt + 1;
+      const delaySeconds = Math.max(1, Math.ceil(delayMs / 1e3));
+      const mode = sessionId ? "continuing existing session" : "starting a fresh session";
+      return `retry ${nextAttempt}/${maxAttempts} in ${delaySeconds}s (${mode})`;
+    };
+    classifyRemoteCodexSetupFailure = ({
+      execResult,
+      lastMessageReadError
+    }) => {
+      const combinedOutputRaw = `${execResult.stdout}
+${execResult.stderr}`;
+      const combinedOutput = combinedOutputRaw.toLowerCase();
+      const sessionId = execResult.threadId ?? extractCodexSessionId(combinedOutputRaw);
+      if (combinedOutput.includes("401 unauthorized")) {
+        return {
+          error: new Error(
+            "codex exec failed: remote Codex auth returned 401 unauthorized. Re-run `dvb setup --codex-auth byo` (or ensure proxy auth is configured), then retry with `dvb init --resume`."
+          ),
+          retryable: false,
+          sessionId
+        };
+      }
+      if (isRelayForbidden2(combinedOutputRaw)) {
+        return {
+          error: new Error(
+            "codex exec failed: relay proxy returned 403 forbidden. Run `dvb setup --codex-auth byo` and retry with `dvb init --resume`."
+          ),
+          retryable: false,
+          sessionId
+        };
+      }
+      if (isRelayMissingOpenAiProxyConfiguration2(combinedOutputRaw)) {
+        return {
+          error: new Error(
+            "codex exec failed: relay proxy is missing OPENAI_API_KEY configuration. Re-run `just dev` so the relay tunnel deploy includes OPENAI_API_KEY, then retry with `dvb init --resume`."
+          ),
+          retryable: false,
+          sessionId
+        };
+      }
+      if (execResult.exitCode === null) {
+        const detail2 = summarizeCodexFailureDetail({
+          combinedOutputRaw,
+          sessionId
+        });
+        const detailSuffix2 = detail2 ? ` Detail: ${detail2}` : "";
+        return {
+          error: new Error(
+            `codex exec failed: remote exec stream closed before exit status.${detailSuffix2}`
+          ),
+          retryable: true,
+          sessionId
+        };
+      }
+      if (combinedOutput.includes("stream disconnected before completion")) {
+        const requestUrl = extractRequestUrl2(combinedOutputRaw);
+        const detail2 = extractStreamDisconnectDetail(combinedOutputRaw) ?? summarizeCodexOutputDetail(combinedOutputRaw);
+        const detailSuffix2 = detail2 ? ` Detail: ${detail2}` : "";
+        if (requestUrl && isLoopbackRelayUrl2(requestUrl)) {
+          return {
+            error: new Error(
+              `codex exec failed: local relay is unreachable at ${requestUrl}. Set a reachable remote relay URL (for example \`DEVBOX_REMOTE_RELAY_BASE_URL=https://relay.boxes.dev\`), run \`dvb setup\`, then retry with \`dvb init --resume\`.${detailSuffix2}`
+            ),
+            retryable: false,
+            sessionId
+          };
+        }
+        const requestTarget = requestUrl ?? "relay /v1/responses endpoint";
+        return {
+          error: new Error(
+            `codex exec failed: proxy stream disconnected before completion while calling ${requestTarget}. Ensure relay connectivity from the remote devbox, then retry with \`dvb init --resume\`.${detailSuffix2}`
+          ),
+          retryable: true,
+          sessionId
+        };
+      }
+      if (combinedOutput.includes("no last agent message")) {
+        const detail2 = summarizeCodexFailureDetail({
+          combinedOutputRaw,
+          sessionId
+        });
+        const detailSuffix2 = detail2 ? ` Detail: ${detail2}` : "";
+        return {
+          error: new Error(
+            `codex exec failed: Codex session ended without a final response.${detailSuffix2} Setup was not applied; retry with \`dvb init --resume\`.`
+          ),
+          retryable: true,
+          sessionId
+        };
+      }
+      if (lastMessageReadError) {
+        const detail2 = summarizeCodexFailureDetail({
+          combinedOutputRaw,
+          lastMessageReadError,
+          sessionId
+        });
+        const detailSuffix2 = detail2 ? ` Detail: ${detail2}` : "";
+        return {
+          error: new Error(
+            `codex exec failed: Codex session ended without writing the final response file.${detailSuffix2} Setup may be incomplete; retry with \`dvb init --resume\`.`
+          ),
+          retryable: true,
+          sessionId
+        };
+      }
+      if (execResult.exitCode !== 0) {
+        const detail2 = summarizeCodexOutputDetail(combinedOutputRaw);
+        const detailSuffix2 = detail2 ? `: ${detail2}` : "";
+        return {
+          error: new Error(
+            `codex exec failed (exit ${String(execResult.exitCode)})${detailSuffix2}`
+          ),
+          retryable: false,
+          sessionId
+        };
+      }
+      const detail = summarizeCodexFailureDetail({
+        combinedOutputRaw,
+        sessionId
+      });
+      const detailSuffix = detail ? ` Detail: ${detail}` : "";
+      return {
+        error: new Error(
+          `codex exec failed: Codex session ended without a final response.${detailSuffix} Setup was not applied; retry with \`dvb init --resume\`.`
+        ),
+        retryable: true,
+        sessionId
+      };
+    };
     isLoopbackRelayUrl2 = (requestUrl) => {
       try {
         const url = new URL(requestUrl);
@@ -217697,44 +217958,59 @@ codex login`
           throw error2;
         }
       }
-      const remoteCodexExecCommand = `codex exec ${[
+      const buildRemoteCodexExecArgs = ({
+        prompt,
+        resumeSessionId
+      }) => resumeSessionId ? [
         ...buildCodexInitExecArgs(),
+        "resume",
         "--dangerously-bypass-approvals-and-sandbox",
+        "--json",
         "--output-last-message",
         codexLastMessagePath,
-        remotePrompt
-      ].map((arg2) => shellQuote5(arg2)).join(" ")}`;
-      const remoteCodexCommand = [
-        pathSetup,
-        ...proxyRoot && proxyTokenPath && proxyCodexHome ? [
-          `proxy_root=${shellQuote5(proxyRoot)}`,
-          `proxy_token=${shellQuote5(proxyTokenPath)}`,
-          `cleanup_proxy() { rm -rf "$proxy_root"; }`,
-          "trap cleanup_proxy EXIT",
-          'export DEVBOX_TOKEN="$(cat "$proxy_token")"',
-          `export CODEX_HOME=${shellQuote5(proxyCodexHome)}`
-        ] : [],
-        `cd ${shellQuote5(expandedWorkdir)}`,
-        remoteCodexExecCommand
-      ].join("\n");
-      await client2.exec(spriteAlias, [
-        "/bin/bash",
-        "--noprofile",
-        "--norc",
-        "-e",
-        "-u",
-        "-o",
-        "pipefail",
-        "-c",
-        `rm -f ${shellQuote5(codexLastMessagePath)}`
-      ]).catch(() => {
-      });
-      let execResult = null;
+        resumeSessionId,
+        prompt
+      ] : [
+        ...buildCodexInitExecArgs(),
+        "--dangerously-bypass-approvals-and-sandbox",
+        "--json",
+        "--output-last-message",
+        codexLastMessagePath,
+        prompt
+      ];
+      const buildRemoteCodexCommand = ({
+        prompt,
+        resumeSessionId
+      }) => {
+        const remoteCodexExecCommand = `codex exec ${buildRemoteCodexExecArgs({
+          prompt,
+          resumeSessionId
+        }).map((arg2) => shellQuote5(arg2)).join(" ")}`;
+        return [
+          pathSetup,
+          ...proxyRoot && proxyTokenPath && proxyCodexHome ? [
+            `proxy_root=${shellQuote5(proxyRoot)}`,
+            `proxy_token=${shellQuote5(proxyTokenPath)}`,
+            `cleanup_proxy() { rm -rf "$proxy_root"; }`,
+            "trap cleanup_proxy EXIT",
+            'export DEVBOX_TOKEN="$(cat "$proxy_token")"',
+            `export CODEX_HOME=${shellQuote5(proxyCodexHome)}`
+          ] : [],
+          `cd ${shellQuote5(expandedWorkdir)}`,
+          remoteCodexExecCommand
+        ].join("\n");
+      };
+      let lastMessage = "";
       try {
-        execResult = await runRemoteCodexExec({
-          client: client2,
-          spriteAlias,
-          cmd: [
+        let resumeSessionId = null;
+        for (let attempt = 1; attempt <= DEFAULT_CODEX_EXEC_MAX_ATTEMPTS; attempt += 1) {
+          const prompt = attempt === 1 ? remotePrompt : resumeSessionId ? "continue" : remotePrompt;
+          const remoteCodexCommand = buildRemoteCodexCommand({
+            prompt,
+            resumeSessionId
+          });
+          status.stage("Apply setup plan");
+          await client2.exec(spriteAlias, [
             "/bin/bash",
             "--noprofile",
             "--norc",
@@ -217743,13 +218019,60 @@ codex login`
             "-o",
             "pipefail",
             "-c",
-            remoteCodexCommand
-          ],
-          onProgress: (message) => {
-            const base = "Apply setup plan";
-            status.stage(`${base} - ${message}`);
+            `rm -f ${shellQuote5(codexLastMessagePath)}`
+          ]).catch(() => {
+          });
+          const execResult = await runRemoteCodexExec({
+            client: client2,
+            spriteAlias,
+            cmd: [
+              "/bin/bash",
+              "--noprofile",
+              "--norc",
+              "-e",
+              "-u",
+              "-o",
+              "pipefail",
+              "-c",
+              remoteCodexCommand
+            ],
+            onProgress: (message) => {
+              status.stage(`Apply setup plan - ${message}`);
+            }
+          });
+          let attemptLastMessage = "";
+          let lastMessageReadError = null;
+          try {
+            const bytes = await client2.readFile(spriteAlias, {
+              path: codexLastMessagePath
+            });
+            attemptLastMessage = Buffer.from(bytes).toString("utf8").trim();
+          } catch (error2) {
+            lastMessageReadError = error2 instanceof Error ? error2 : new Error(String(error2));
           }
-        });
+          if (execResult.exitCode === 0 && attemptLastMessage) {
+            lastMessage = attemptLastMessage;
+            break;
+          }
+          const failure = classifyRemoteCodexSetupFailure({
+            execResult,
+            ...attemptLastMessage ? {} : { lastMessageReadError }
+          });
+          if (!failure.retryable || attempt >= DEFAULT_CODEX_EXEC_MAX_ATTEMPTS) {
+            throw failure.error;
+          }
+          resumeSessionId = failure.sessionId ?? resumeSessionId;
+          const delayMs = computeCodexExecRetryDelayMs(attempt);
+          status.stage(
+            `Apply setup plan - ${formatCodexRetryProgress2({
+              attempt,
+              maxAttempts: DEFAULT_CODEX_EXEC_MAX_ATTEMPTS,
+              delayMs,
+              sessionId: resumeSessionId
+            })}`
+          );
+          await delay2(delayMs);
+        }
       } finally {
         if (proxyRoot) {
           await client2.exec(spriteAlias, [
@@ -217766,65 +218089,8 @@ codex login`
           });
         }
       }
-      let lastMessage = "";
-      let lastMessageReadError = null;
-      try {
-        const bytes = await client2.readFile(spriteAlias, {
-          path: codexLastMessagePath
-        });
-        lastMessage = Buffer.from(bytes).toString("utf8").trim();
-      } catch (error2) {
-        lastMessageReadError = error2 instanceof Error ? error2 : new Error(String(error2));
-      }
       if (!lastMessage) {
-        const combinedOutputRaw = `${execResult?.stdout ?? ""}
-${execResult?.stderr ?? ""}`;
-        const combinedOutput = combinedOutputRaw.toLowerCase();
-        if (combinedOutput.includes("401 unauthorized")) {
-          throw new Error(
-            "codex exec failed: remote Codex auth returned 401 unauthorized. Re-run `dvb setup --codex-auth byo` (or ensure proxy auth is configured), then retry with `dvb init --resume`."
-          );
-        }
-        if (combinedOutput.includes("stream disconnected before completion")) {
-          const requestUrl = extractRequestUrl2(combinedOutputRaw);
-          const detail2 = extractStreamDisconnectDetail(combinedOutputRaw) ?? summarizeCodexOutputDetail(combinedOutputRaw);
-          const detailSuffix2 = detail2 ? ` Detail: ${detail2}` : "";
-          if (requestUrl && isLoopbackRelayUrl2(requestUrl)) {
-            throw new Error(
-              `codex exec failed: local relay is unreachable at ${requestUrl}. Set a reachable remote relay URL (for example \`DEVBOX_REMOTE_RELAY_BASE_URL=https://relay.boxes.dev\`), run \`dvb setup\`, then retry with \`dvb init --resume\`.${detailSuffix2}`
-            );
-          }
-          const requestTarget = requestUrl ?? "relay /v1/responses endpoint";
-          throw new Error(
-            `codex exec failed: proxy stream disconnected before completion while calling ${requestTarget}. Ensure relay connectivity from the remote devbox, then retry with \`dvb init --resume\`.${detailSuffix2}`
-          );
-        }
-        if (combinedOutput.includes("no last agent message")) {
-          const detail2 = summarizeCodexFailureDetail({
-            combinedOutputRaw
-          });
-          const detailSuffix2 = detail2 ? ` Detail: ${detail2}` : "";
-          throw new Error(
-            `codex exec failed: Codex session ended without a final response.${detailSuffix2} Setup was not applied; retry with \`dvb init --resume\`.`
-          );
-        }
-        if (lastMessageReadError) {
-          const detail2 = summarizeCodexFailureDetail({
-            combinedOutputRaw,
-            lastMessageReadError
-          });
-          const detailSuffix2 = detail2 ? ` Detail: ${detail2}` : "";
-          throw new Error(
-            `codex exec failed: Codex session ended without writing the final response file.${detailSuffix2} Setup may be incomplete; retry with \`dvb init --resume\`.`
-          );
-        }
-        const detail = summarizeCodexFailureDetail({
-          combinedOutputRaw
-        });
-        const detailSuffix = detail ? ` Detail: ${detail}` : "";
-        throw new Error(
-          `codex exec failed: Codex session ended without a final response.${detailSuffix} Setup was not applied; retry with \`dvb init --resume\`.`
-        );
+        throw new Error("codex exec failed: remote apply exhausted retries.");
       }
       if (!emitCodexOutput) return;
       status.stop();
@@ -221771,7 +222037,7 @@ var init_provider = __esm({
 });
 
 // src/devbox/commands/init/index.ts
-var import_node_path38, import_node_os21, requireDaemonJsonOk, resolveInitStatus, mergeLocalPaths, DEFAULT_INIT_STEP_RETRIES, INIT_STEP_RETRYABLE_STATUSES, INIT_EXEC_RETRYABLE_STATUSES, ALIAS_PATTERN3, RESERVED_ALIAS_PATTERN3, DEFAULT_COMPUTE_PROVIDER, delay2, normalizeAlias4, resolveComputeProvider, validateAlias, computeRetryDelayMs2, getErrorCode2, parseExecUnexpectedResponseStatus2, isRetryableInitError, retryInitStep, extractCheckpointId, throwInitCanceled, confirmDestroyExistingDevbox, runInit;
+var import_node_path38, import_node_os21, requireDaemonJsonOk, resolveInitStatus, mergeLocalPaths, DEFAULT_INIT_STEP_RETRIES, INIT_STEP_RETRYABLE_STATUSES, INIT_EXEC_RETRYABLE_STATUSES, ALIAS_PATTERN3, RESERVED_ALIAS_PATTERN3, DEFAULT_COMPUTE_PROVIDER, delay3, normalizeAlias4, resolveComputeProvider, validateAlias, computeRetryDelayMs2, getErrorCode2, parseExecUnexpectedResponseStatus2, isRetryableInitError, retryInitStep, extractCheckpointId, throwInitCanceled, confirmDestroyExistingDevbox, runInit;
 var init_init = __esm({
   "src/devbox/commands/init/index.ts"() {
     "use strict";
@@ -221842,7 +222108,7 @@ var init_init = __esm({
     ALIAS_PATTERN3 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
     RESERVED_ALIAS_PATTERN3 = /^dvb-[a-f0-9]{12}-/;
     DEFAULT_COMPUTE_PROVIDER = "modal";
-    delay2 = async (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
+    delay3 = async (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
     normalizeAlias4 = (value) => value.trim().toLowerCase();
     resolveComputeProvider = ({
       requested,
@@ -221944,7 +222210,7 @@ var init_init = __esm({
             ...error2 instanceof SpritesApiError ? { status: error2.status } : {},
             ...parseExecUnexpectedResponseStatus2(error2) !== null ? { execStatus: parseExecUnexpectedResponseStatus2(error2) } : {}
           });
-          await delay2(computeRetryDelayMs2(retryIndex));
+          await delay3(computeRetryDelayMs2(retryIndex));
         }
       }
       throw lastError instanceof Error ? lastError : new Error(`Init step failed: ${title}`);
@@ -229131,4 +229397,4 @@ smol-toml/dist/index.js:
 */
 //# sourceMappingURL=dvb.cjs.map
 
-//# debugId=a741b1b2-865d-5d60-b44d-6259dcc3a122
+//# debugId=1518c9c7-f041-5409-b81f-b01b956a3638