@boxes-dev/dvb-runtime 1.0.902 → 1.0.904

package/dist/bin/dvb.mjs

@@ -95575,8 +95575,8 @@ var init_otel = __esm({
       return trimmed && trimmed.length > 0 ? trimmed : void 0;
     };
     readBuildMetadata = () => {
-      const rawPackageVersion = "1.0.902";
-      const rawGitSha = "87c701cc4267a4d7c25a20a46f09e82eadcf0bb5";
+      const rawPackageVersion = "1.0.904";
+      const rawGitSha = "16870893a746d8a8e3fc964f23fcebab6451513b";
       const packageVersion = typeof rawPackageVersion === "string" ? rawPackageVersion : void 0;
       const gitSha = typeof rawGitSha === "string" ? rawGitSha : void 0;
       return { packageVersion, gitSha };
@@ -127977,9 +127977,9 @@ var init_sentry = __esm({
     uncaughtExceptionMonitorInstalled = false;
     currentDevboxSentryUser = null;
     readBuildMetadata2 = () => {
-      const rawPackageVersion = "1.0.902";
-      const rawGitSha = "87c701cc4267a4d7c25a20a46f09e82eadcf0bb5";
-      const rawSentryRelease = "boxes-dev-dvb@1.0.902+87c701cc4267a4d7c25a20a46f09e82eadcf0bb5";
+      const rawPackageVersion = "1.0.904";
+      const rawGitSha = "16870893a746d8a8e3fc964f23fcebab6451513b";
+      const rawSentryRelease = "boxes-dev-dvb@1.0.904+16870893a746d8a8e3fc964f23fcebab6451513b";
       const packageVersion = typeof rawPackageVersion === "string" ? rawPackageVersion : void 0;
       const gitSha = typeof rawGitSha === "string" ? rawGitSha : void 0;
       const sentryRelease = typeof rawSentryRelease === "string" ? rawSentryRelease : void 0;
@@ -136809,7 +136809,7 @@ var init_packageVersion = __esm({
       return path17.join(process.cwd(), "dvb");
     };
     readEmbeddedPackageVersion = () => {
-      const raw = "1.0.902";
+      const raw = "1.0.904";
       return trimVersion(raw);
     };
     readNearestPackageMetadata = (basePath) => {

package/dist/bin/dvbd.mjs

@@ -92311,8 +92311,8 @@ var init_otel = __esm({
       return trimmed && trimmed.length > 0 ? trimmed : void 0;
     };
     readBuildMetadata = () => {
-      const rawPackageVersion = "1.0.902";
-      const rawGitSha = "87c701cc4267a4d7c25a20a46f09e82eadcf0bb5";
+      const rawPackageVersion = "1.0.904";
+      const rawGitSha = "16870893a746d8a8e3fc964f23fcebab6451513b";
       const packageVersion = typeof rawPackageVersion === "string" ? rawPackageVersion : void 0;
       const gitSha = typeof rawGitSha === "string" ? rawGitSha : void 0;
       return { packageVersion, gitSha };
@@ -124607,9 +124607,9 @@ var init_sentry = __esm({
     uncaughtExceptionMonitorInstalled = false;
     currentDevboxSentryUser = null;
     readBuildMetadata2 = () => {
-      const rawPackageVersion = "1.0.902";
-      const rawGitSha = "87c701cc4267a4d7c25a20a46f09e82eadcf0bb5";
-      const rawSentryRelease = "boxes-dev-dvb@1.0.902+87c701cc4267a4d7c25a20a46f09e82eadcf0bb5";
+      const rawPackageVersion = "1.0.904";
+      const rawGitSha = "16870893a746d8a8e3fc964f23fcebab6451513b";
+      const rawSentryRelease = "boxes-dev-dvb@1.0.904+16870893a746d8a8e3fc964f23fcebab6451513b";
       const packageVersion = typeof rawPackageVersion === "string" ? rawPackageVersion : void 0;
       const gitSha = typeof rawGitSha === "string" ? rawGitSha : void 0;
       const sentryRelease = typeof rawSentryRelease === "string" ? rawSentryRelease : void 0;
@@ -130261,7 +130261,7 @@ var init_packageVersion = __esm({
       return path8.join(process.cwd(), "dvb");
     };
     readEmbeddedPackageVersion = () => {
-      const raw = "1.0.902";
+      const raw = "1.0.904";
       return trimVersion(raw);
     };
     readNearestPackageMetadata = (basePath) => {

package/dist/product-docs/references/desktop-workbench.md

@@ -262,11 +262,12 @@ Team Settings also shows **Static egress IP**. This optional feature gives the
 team a stable public IPv4 to allowlist at an external database or service. It
 is visible but off by default; use **Talk to us** to request enablement. Once
 enabled, all team members can copy the current static IP and read the configured
-destinations. Team admins can add or remove exact public hostnames with exact
-TCP ports, such as `db.example.com` on `5432`. Wildcards, IP literals, private
-destinations, port ranges, and UDP are not supported. When the feature or its
-current policy is unavailable, configured destinations fail closed while
-unrelated runtime traffic continues normally.
+destinations. Team admins can add or remove exact public hostnames or public
+IPv4 addresses with exact TCP ports, such as `db.example.com` or `1.1.1.1` on
+`5432`. Wildcards, private or reserved IP addresses, IP ranges, port ranges,
+IPv6, and UDP are not supported. When the feature or its current policy is
+unavailable, configured destinations fail closed while unrelated runtime
+traffic continues normally.
 
 ## Updates And Feedback
 

package/dist/product-docs/references/onbox-agent-tools.md

@@ -87,6 +87,24 @@ reasoning efforts, and its default effort. Treat it as the authority for the
 current box; do not guess from an older list. Discovery reads only the source
 box and does not create, wake, or inspect a destination devbox.
 
+From an authorized ordinary devbox, start another thread on that same devbox:
+
+```bash
+dvb-onbox threads start \
+  --target current-devbox \
+  --agent codex \
+  --prompt-file <path> \
+  --idempotency-key <caller-key> \
+  --json
+```
+
+The new thread shares the current devbox's live filesystem, including
+uncommitted and untracked files. Use this target when the delegated task depends
+on local-only work. Concurrent agents can overwrite or invalidate each other's
+work, so give them separate files or otherwise non-overlapping responsibilities.
+The Template box may be a delegation source, but `current-devbox` is rejected
+there because the Template box is never a delegated thread target.
+
 From an authorized source box, start a Codex or Claude thread on a new devbox:
 
 ```bash
@@ -119,7 +137,11 @@ managed default behavior used by older `dvb-onbox` versions.
 
 The new devbox belongs to the source box's project and uses the latest eligible
 Template-box snapshot. If no eligible snapshot exists, the command fails with
-`snapshot_required`; it never snapshots or clones the live source box.
+`snapshot_required`; it never snapshots or clones the live source box. Files,
+edits, branches, and commits that exist only on the source devbox are absent.
+Push a needed commit to a Git remote and tell the child to fetch and check it
+out, or use `current-devbox`; pushing alone does not change the commit checked
+out in the new devbox.
 
 To start another thread on an ordinary devbox, use its instance ID:
 
@@ -135,7 +157,7 @@ dvb-onbox threads start \
 The target devbox must belong to the current box's project. An instance ID from
 another project is rejected even when both projects belong to the same user.
 
-The Template box may be a source but is never a delegated thread target. Both
+The Template box may be a source but is never a delegated thread target. All
 forms return the child thread and devbox IDs. Retry an uncertain result with the
 same idempotency key and identical arguments, including model and reasoning
 effort; changed arguments under the same key fail.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boxes-dev/dvb-runtime",
-  "version": "1.0.902",
+  "version": "1.0.904",
   "type": "module",
   "license": "UNLICENSED",
   "imports": {
@@ -79,5 +79,5 @@
     "e2b": "^2.18.0",
     "ink-testing-library": "^4.0.0"
   },
-  "devboxReleasedAt": "2026-08-05T22:41:53Z"
+  "devboxReleasedAt": "2026-08-05T23:49:38Z"
 }