@boxes-dev/dvb-runtime 1.0.301 → 1.0.303

package/dist/bin/.bundle-state.json

@@ -1,7 +1,7 @@
 {
   "version": 1,
-  "hash": "683ae03ca40fade9204877fd09a906295ea8ba014b64503513f9c0dd8d52a18e",
-  "updatedAt": "2026-03-30T16:49:49.590Z",
+  "hash": "817bedda67179b4486140214d7aaf218897e4e9816525116183ff935c91b1ce8",
+  "updatedAt": "2026-03-30T17:39:11.614Z",
   "outputs": [
     "dvb.cjs",
     "dvbd.cjs"

package/dist/bin/dvb.cjs

@@ -88702,8 +88702,8 @@ var init_otel = __esm({
       return trimmed && trimmed.length > 0 ? trimmed : void 0;
     };
     readBuildMetadata = () => {
-      const rawPackageVersion = "1.0.301";
-      const rawGitSha = "91c2794ca672a668aa4696d732c5de394123f54b";
+      const rawPackageVersion = "1.0.303";
+      const rawGitSha = "7af5aec17ff5636612e9ac154698e3769c60d8c1";
       const packageVersion = typeof rawPackageVersion === "string" ? rawPackageVersion : void 0;
       const gitSha = typeof rawGitSha === "string" ? rawGitSha : void 0;
       return { packageVersion, gitSha };
@@ -120895,9 +120895,9 @@ var init_sentry = __esm({
     sentryEnabled = false;
     uncaughtExceptionMonitorInstalled = false;
     readBuildMetadata2 = () => {
-      const rawPackageVersion = "1.0.301";
-      const rawGitSha = "91c2794ca672a668aa4696d732c5de394123f54b";
-      const rawSentryRelease = "boxes-dev-dvb@1.0.301+91c2794ca672a668aa4696d732c5de394123f54b";
+      const rawPackageVersion = "1.0.303";
+      const rawGitSha = "7af5aec17ff5636612e9ac154698e3769c60d8c1";
+      const rawSentryRelease = "boxes-dev-dvb@1.0.303+7af5aec17ff5636612e9ac154698e3769c60d8c1";
       const packageVersion = typeof rawPackageVersion === "string" ? rawPackageVersion : void 0;
       const gitSha = typeof rawGitSha === "string" ? rawGitSha : void 0;
       const sentryRelease = typeof rawSentryRelease === "string" ? rawSentryRelease : void 0;
@@ -124894,7 +124894,7 @@ var init_packageVersion = __esm({
       return import_node_path8.default.join(process.cwd(), "dvb");
     };
     readEmbeddedPackageVersion = () => {
-      const raw = "1.0.301";
+      const raw = "1.0.303";
       return trimVersion(raw);
     };
     readNearestPackageMetadata = (basePath) => {

package/dist/bin/dvbd.cjs

@@ -88625,8 +88625,8 @@ var init_otel = __esm({
       return trimmed && trimmed.length > 0 ? trimmed : void 0;
     };
     readBuildMetadata = () => {
-      const rawPackageVersion = "1.0.301";
-      const rawGitSha = "91c2794ca672a668aa4696d732c5de394123f54b";
+      const rawPackageVersion = "1.0.303";
+      const rawGitSha = "7af5aec17ff5636612e9ac154698e3769c60d8c1";
       const packageVersion = typeof rawPackageVersion === "string" ? rawPackageVersion : void 0;
       const gitSha = typeof rawGitSha === "string" ? rawGitSha : void 0;
       return { packageVersion, gitSha };
@@ -120747,9 +120747,9 @@ var init_sentry = __esm({
     sentryEnabled = false;
     uncaughtExceptionMonitorInstalled = false;
     readBuildMetadata2 = () => {
-      const rawPackageVersion = "1.0.301";
-      const rawGitSha = "91c2794ca672a668aa4696d732c5de394123f54b";
-      const rawSentryRelease = "boxes-dev-dvb@1.0.301+91c2794ca672a668aa4696d732c5de394123f54b";
+      const rawPackageVersion = "1.0.303";
+      const rawGitSha = "7af5aec17ff5636612e9ac154698e3769c60d8c1";
+      const rawSentryRelease = "boxes-dev-dvb@1.0.303+7af5aec17ff5636612e9ac154698e3769c60d8c1";
       const packageVersion = typeof rawPackageVersion === "string" ? rawPackageVersion : void 0;
       const gitSha = typeof rawGitSha === "string" ? rawGitSha : void 0;
       const sentryRelease = typeof rawSentryRelease === "string" ? rawSentryRelease : void 0;
@@ -124692,7 +124692,7 @@ var init_packageVersion = __esm({
       return import_node_path7.default.join(process.cwd(), "dvb");
     };
     readEmbeddedPackageVersion = () => {
-      const raw = "1.0.301";
+      const raw = "1.0.303";
       return trimVersion(raw);
     };
     readNearestPackageMetadata = (basePath) => {

package/dist/prompts/local-scan-external.md

@@ -15,6 +15,7 @@ Do not scan devbox-generated state directories.
 Never enumerate dependency, cache, or build-output trees. Always exclude or prune at least `node_modules`, `.git`, `.devbox`, `dist`, `build`, `.next`, `.turbo`, `.vite`, and `coverage`.
 Never use shell globstar patterns such as `**/*.md` or `**/package.json`; in zsh they can expand into `node_modules`. Prefer `find ... -prune` or `rg --glob '!node_modules/**'`.
 Keep command output tight. Prefer listing candidate files first, then reading only the small set of relevant files.
+Never include Codex or Claude config/state paths in `externalConfigs`, and never propose copying them to the devbox from this scan. In particular, never include `~/.codex`, anything under it, `~/.claude`, anything under it, or any `.claude*.json` file. Codex and Claude bootstrap those separately.
 Before returning JSON, verify every `path` in `externalConfigs` currently exists on disk.
 Do not include any missing/nonexistent paths.
 If you find no required external dependencies or external config files, return

package/dist/prompts/local-scan-shell-history.md

@@ -15,7 +15,8 @@ Important constraints:
 - Do not inspect repo source files, repo docs, README files, or `AGENTS.md`. This scan is about shell history and user-level terminal config only.
 - Never infer arbitrary target files from command arguments. Example: `vim ~/.admin_secrets` is evidence for `vim`, not for copying `~/.admin_secrets`.
 - Do not include shell builtins, one-off repo scripts, or generic POSIX commands like `cd`, `ls`, `cat`, `echo`, `pwd`, `cp`, `mv`, `rm`, `mkdir`, `grep`, `sed`, `awk`, `find`.
-- Do not include whole tool state trees, session stores, caches, or worktree directories as external configs. In particular, never include `~/.codex`, anything under it, `~/.claude`, anything under it, or any `.claude*.json` file. Codex and Claude bootstrap those separately.
+- Never include `codex` or `claude` as history-driven external dependencies. Their install/auth/bootstrap flow is handled by separate devbox init steps even if shell history shows repeated usage.
+- Never include Codex or Claude config/state paths in `externalConfigs`, and never propose copying them to the devbox from this scan. In particular, never include `~/.codex`, anything under it, `~/.claude`, anything under it, or any `.claude*.json` file. Codex and Claude bootstrap those separately.
 - Prefer high-confidence signals: repeated command usage, explicit editor/tool commands, and verified matching config paths.
 - Keep command output tight. Prefer `ls -la <path> 2>/dev/null || true`, `test -e <path>`, `command -v <tool>`, and `tool --version` for only the tools you are considering.
 - Before returning JSON, verify every `path` in `externalConfigs` currently exists on disk.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boxes-dev/dvb-runtime",
-  "version": "1.0.301",
+  "version": "1.0.303",
   "type": "module",
   "license": "UNLICENSED",
   "publishConfig": {
@@ -42,5 +42,5 @@
     "@boxes-dev/daemon": "*",
     "e2b": "^2.18.0"
   },
-  "devboxReleasedAt": "2026-03-30T16:50:04Z"
+  "devboxReleasedAt": "2026-03-30T17:39:23Z"
 }