@madarco/agentbox 0.10.0 → 0.11.0

package/dist/index.js

@@ -5,7 +5,7 @@ import {
   maskKey,
   readDaytonaCredStatus,
   secretsPath
-} from "./chunk-LEV3KICD.js";
+} from "./chunk-ZGVMN54V.js";
 import {
   detectEgressIp,
   ensureHetznerCredentials,
@@ -15,7 +15,7 @@ import {
   readHetznerCredStatus,
   secretsPath as secretsPath2,
   syncFirewallSource
-} from "./chunk-I24B6AXR.js";
+} from "./chunk-R5XIDQFR.js";
 import {
   detectSbx,
   ensureVercelCredentials,
@@ -23,7 +23,7 @@ import {
   maskKey as maskKey3,
   readVercelCredStatus,
   secretsPath as secretsPath3
-} from "./chunk-MTVI44DW.js";
+} from "./chunk-ECLLV5JH.js";
 import {
   agentSpecsForCloud,
   ensureAgentVolumesForCloud,
@@ -31,7 +31,7 @@ import {
   probeCloudCheckpoint,
   resolveCloudCheckpoint,
   seedAgentVolumesIfFresh
-} from "./chunk-2GPORKYF.js";
+} from "./chunk-D4Q2RUQI.js";
 import {
   ADVANCED_HINT_GROUPS,
   ALERT_BAND_ROWS,
@@ -61,7 +61,7 @@ import {
   statusLine,
   stripTitleGlyph,
   subscribePrompts
-} from "./chunk-R4O5WPHW.js";
+} from "./chunk-NVSRGC5W.js";
 import {
   AmbiguousBoxError,
   BOX_STATUS_EVENT,
@@ -207,20 +207,21 @@ import {
   waitForTmuxPaneContent,
   warmUpClaudeCredentials,
   writeJob
-} from "./chunk-7UIAO7PC.js";
+} from "./chunk-GUNUBIRB.js";
 import {
   DEFAULT_BOX_IMAGE,
   STATE_DIR,
   ensureImage,
+  hostOpenCommand,
   imageInfo,
   readState,
   resolveBoxRef
-} from "./chunk-KL36BRN4.js";
+} from "./chunk-SNTHHWKY.js";
 import "./chunk-G3H2L3O2.js";
 
 // src/version.ts
-var AGENTBOX_VERSION = true ? "0.10.0" : "0.0.0-dev";
-var AGENTBOX_COMMIT = true ? "e0ccad3c" : "dev";
+var AGENTBOX_VERSION = true ? "0.11.0" : "0.0.0-dev";
+var AGENTBOX_COMMIT = true ? "1f8ef1db" : "dev";
 
 // src/index.ts
 import { Command as Command46 } from "commander";
@@ -591,7 +592,7 @@ function parsePositiveInt(raw, label) {
 }
 
 // src/commands/claude.ts
-import { confirm as confirm3, intro, isCancel as isCancel4, log as log9, outro as outro2, spinner as spinner3 } from "@clack/prompts";
+import { confirm as confirm3, intro, isCancel as isCancel4, log as log8, outro, spinner as spinner3 } from "@clack/prompts";
 import { Command as Command2 } from "commander";
 
 // src/auth.ts
@@ -822,9 +823,6 @@ function resolveAttachInOption(opts) {
   return void 0;
 }
 
-// src/commands/_cloud-agent-create.ts
-import { log as log4, outro } from "@clack/prompts";
-
 // src/lib/progress.ts
 import { spinner } from "@clack/prompts";
 
@@ -867,6 +865,138 @@ function makeProgressReporter(verbose) {
   };
 }
 
+// src/lib/launch-recap.ts
+import { homedir as homedir2 } from "os";
+import { note } from "@clack/prompts";
+
+// src/lib/from-branch.ts
+import { execa } from "execa";
+var SHA_RE = /^[0-9a-f]{7,40}$/i;
+var FromBranchError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "FromBranchError";
+  }
+};
+async function resolveFromBranch(ref, opts) {
+  if (!ref || ref.length === 0) return void 0;
+  const remote = opts.remote ?? "origin";
+  const isSha = SHA_RE.test(ref);
+  if (!isSha) {
+    const fetched = await execa(
+      "git",
+      ["-C", opts.repo, "fetch", "--quiet", remote, ref],
+      { reject: false }
+    );
+    if (fetched.exitCode !== 0) {
+    }
+  }
+  const verify = await execa(
+    "git",
+    ["-C", opts.repo, "rev-parse", "--verify", `${ref}^{commit}`],
+    { reject: false }
+  );
+  if (verify.exitCode !== 0) {
+    throw new FromBranchError(
+      `--from-branch: unknown ref "${ref}" (not found in ${opts.repo} after fetch). Provide a branch, tag, or SHA reachable from the host repo.`
+    );
+  }
+  return ref;
+}
+var UseBranchError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "UseBranchError";
+  }
+};
+async function resolveUseBranch(name, opts) {
+  if (!name || name.length === 0) return void 0;
+  const remote = opts.remote ?? "origin";
+  await execa("git", ["-C", opts.repo, "fetch", "--quiet", remote, name], {
+    reject: false
+  });
+  const exists = await execa(
+    "git",
+    ["-C", opts.repo, "show-ref", "--verify", "--quiet", `refs/heads/${name}`],
+    { reject: false }
+  );
+  if (exists.exitCode !== 0) {
+    throw new UseBranchError(
+      `--use-branch: no local branch "${name}" in ${opts.repo}. Create or check it out on the host first (--use-branch reuses an existing branch; use --from-branch to fork a new box branch from a ref).`
+    );
+  }
+  return name;
+}
+async function currentHostBranch(repo) {
+  const r = await execa("git", ["-C", repo, "rev-parse", "--abbrev-ref", "HEAD"], {
+    reject: false
+  });
+  if (r.exitCode !== 0) return void 0;
+  const branch = r.stdout.trim();
+  if (!branch || branch === "HEAD") return void 0;
+  return branch;
+}
+async function resolveBranchSelection(opts) {
+  if (opts.useBranch && opts.fromBranch) {
+    throw new UseBranchError(
+      "--use-branch and --from-branch are mutually exclusive: --use-branch reuses an existing branch, --from-branch forks a new box branch from a base ref. Pass only one."
+    );
+  }
+  if (opts.useBranch) {
+    return { useBranch: await resolveUseBranch(opts.useBranch, { repo: opts.repo }) };
+  }
+  if (opts.fromBranch) {
+    return { fromBranch: await resolveFromBranch(opts.fromBranch, { repo: opts.repo }) };
+  }
+  if (opts.providerName !== "docker" && opts.cloudUseCurrentBranch) {
+    const current = await currentHostBranch(opts.repo);
+    if (current) {
+      opts.log?.(`cloud.useCurrentBranch: starting box on host branch "${current}"`);
+      return { useBranch: current };
+    }
+    opts.log?.(
+      "cloud.useCurrentBranch is set but host HEAD is detached; forking a fresh branch instead"
+    );
+  }
+  return {};
+}
+
+// src/lib/launch-recap.ts
+function homeShorten(p) {
+  const home = homedir2();
+  return p === home || p.startsWith(home + "/") ? "~" + p.slice(home.length) : p;
+}
+function whiten(text) {
+  if (process.env.NO_COLOR) return text;
+  return text.split("\n").map((line) => `\x1B[0m\x1B[97m${line}\x1B[0m`).join("\n");
+}
+async function printLaunchRecap(args) {
+  const { record } = args;
+  const rows = [];
+  rows.push([
+    "box",
+    args.checkpointRef ? `${record.name} (${args.checkpointRef})` : record.name
+  ]);
+  if (record.projectRoot) {
+    rows.push(["project", homeShorten(record.projectRoot)]);
+  }
+  const toBranch = record.gitWorktrees?.find((w) => w.kind === "root")?.branch;
+  if (toBranch) {
+    if (args.useBranch) {
+      rows.push(["branch", `${toBranch} (reused)`]);
+    } else {
+      const base = args.fromBranch ?? await currentHostBranch(args.workspacePath) ?? "HEAD";
+      rows.push(["branch", `${base} \u2192 ${toBranch}`]);
+    }
+  }
+  const pad4 = Math.max(...rows.map(([label]) => label.length)) + 2;
+  const body = rows.map(([label, value]) => `${label.padEnd(pad4)}${value}`).join("\n");
+  const instruction = args.attaching ? `Ctrl+a d to detach. Reattach with: agentbox ${args.mode} attach ${args.reattach}` : `Attach with: agentbox ${args.mode} attach ${args.reattach}`;
+  note(whiten(`${body}
+
+${instruction}`));
+}
+
 // src/commands/_cloud-agent-create.ts
 async function cloudAgentCreate(args) {
   const s = makeProgressReporter(args.verbose === true);
@@ -877,12 +1007,7 @@ async function cloudAgentCreate(args) {
       onLog: (line) => s.message(line)
     });
     const nSuffix = typeof result.record.projectIndex === "number" ? `  \xB7  n ${String(result.record.projectIndex)}` : "";
-    s.stop(`box ${result.record.name} ready${nSuffix}`);
-    log4.info(`id:        ${result.record.id}`);
-    log4.info(`provider:  ${result.record.provider}`);
-    if (result.record.cloud?.sandboxId) {
-      log4.info(`sandboxId: ${result.record.cloud.sandboxId}`);
-    }
+    s.stop(`box ready${nSuffix}`);
     let extraArgs = args.extraArgs;
     if (args.beforeStart) {
       const hook = await args.beforeStart(result.record);
@@ -890,13 +1015,19 @@ async function cloudAgentCreate(args) {
         extraArgs = [...hook.agentArgsPrefix, ...extraArgs ?? []];
       }
     }
+    await printLaunchRecap({
+      record: result.record,
+      mode: args.mode,
+      reattach: typeof result.record.projectIndex === "number" ? String(result.record.projectIndex) : result.record.name,
+      workspacePath: args.request.workspacePath,
+      fromBranch: args.request.fromBranch,
+      useBranch: args.request.useBranch,
+      checkpointRef: args.request.checkpointRef,
+      attaching: args.attach !== false
+    });
     if (args.attach === false) {
-      outro(
-        `session not started \u2014 attach with: agentbox ${args.mode} attach ${result.record.name}`
-      );
       return;
     }
-    outro(`attaching ${args.mode} \u2014 Control+a d to detach, leaves the agent running`);
     await cloudAgentAttach({
       box: result.record,
       binary: args.binary,
@@ -915,7 +1046,7 @@ async function cloudAgentCreate(args) {
 import { join as join4 } from "path";
 
 // src/carry-prompt.ts
-import { isCancel, log as log5, select } from "@clack/prompts";
+import { isCancel, log as log4, select } from "@clack/prompts";
 
 // src/fmt.ts
 function fmtBytes(n) {
@@ -999,7 +1130,7 @@ function printSummary(entries) {
       `  ${pad(e.rawSrc, srcW)}  \u2192  ${pad(e.rawDest, destW)}  ${pad(size, 9)}  ${flags.join(", ")}`
     );
   }
-  log5.message(rows.join("\n"));
+  log4.message(rows.join("\n"));
 }
 function pad(s, w) {
   if (s.length >= w) return s;
@@ -1008,13 +1139,13 @@ function pad(s, w) {
 
 // src/lib/carry-resolve.ts
 import { realpath, stat as stat2 } from "fs/promises";
-import { homedir as homedir2 } from "os";
+import { homedir as homedir3 } from "os";
 import { isAbsolute, join as join3, normalize, resolve } from "path";
 var DEFAULT_MAX_BYTES = 50 * 1024 * 1024;
 var DENYLIST_DEST_PREFIXES = ["/proc", "/sys", "/dev"];
 var DENYLIST_DEST_EXACT = /* @__PURE__ */ new Set(["/etc/passwd", "/etc/shadow"]);
 async function resolveCarry(items, opts) {
-  const home = opts.homeDir ?? homedir2();
+  const home = opts.homeDir ?? homedir3();
   const cap = opts.maxBytes ?? readMaxBytesFromEnv() ?? DEFAULT_MAX_BYTES;
   const projectRoot = opts.projectRoot;
   const entries = [];
@@ -1208,7 +1339,7 @@ async function dirSizeCapped(dir, cap) {
 
 // src/lib/carry-gate.ts
 async function runCarryGate(args) {
-  const log45 = args.onLog ?? (() => {
+  const log44 = args.onLog ?? (() => {
   });
   const yamlPath = join4(args.projectRoot, "agentbox.yaml");
   const items = await loadCarrySection(yamlPath);
@@ -1230,108 +1361,16 @@ async function runCarryGate(args) {
   });
   if (decision === "cancel") return { decision: "cancel" };
   if (decision === "skip-this-run") {
-    log45(`carry: skipped for this box (${String(resolved.entries.length)} entry/entries not copied)`);
+    log44(`carry: skipped for this box (${String(resolved.entries.length)} entry/entries not copied)`);
     return { decision: "skip", entries: [] };
   }
   return { decision: "approve", entries: resolved.entries };
 }
 
-// src/lib/from-branch.ts
-import { execa } from "execa";
-var SHA_RE = /^[0-9a-f]{7,40}$/i;
-var FromBranchError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "FromBranchError";
-  }
-};
-async function resolveFromBranch(ref, opts) {
-  if (!ref || ref.length === 0) return void 0;
-  const remote = opts.remote ?? "origin";
-  const isSha = SHA_RE.test(ref);
-  if (!isSha) {
-    const fetched = await execa(
-      "git",
-      ["-C", opts.repo, "fetch", "--quiet", remote, ref],
-      { reject: false }
-    );
-    if (fetched.exitCode !== 0) {
-    }
-  }
-  const verify = await execa(
-    "git",
-    ["-C", opts.repo, "rev-parse", "--verify", `${ref}^{commit}`],
-    { reject: false }
-  );
-  if (verify.exitCode !== 0) {
-    throw new FromBranchError(
-      `--from-branch: unknown ref "${ref}" (not found in ${opts.repo} after fetch). Provide a branch, tag, or SHA reachable from the host repo.`
-    );
-  }
-  return ref;
-}
-var UseBranchError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "UseBranchError";
-  }
-};
-async function resolveUseBranch(name, opts) {
-  if (!name || name.length === 0) return void 0;
-  const remote = opts.remote ?? "origin";
-  await execa("git", ["-C", opts.repo, "fetch", "--quiet", remote, name], {
-    reject: false
-  });
-  const exists = await execa(
-    "git",
-    ["-C", opts.repo, "show-ref", "--verify", "--quiet", `refs/heads/${name}`],
-    { reject: false }
-  );
-  if (exists.exitCode !== 0) {
-    throw new UseBranchError(
-      `--use-branch: no local branch "${name}" in ${opts.repo}. Create or check it out on the host first (--use-branch reuses an existing branch; use --from-branch to fork a new box branch from a ref).`
-    );
-  }
-  return name;
-}
-async function currentHostBranch(repo) {
-  const r = await execa("git", ["-C", repo, "rev-parse", "--abbrev-ref", "HEAD"], {
-    reject: false
-  });
-  if (r.exitCode !== 0) return void 0;
-  const branch = r.stdout.trim();
-  if (!branch || branch === "HEAD") return void 0;
-  return branch;
-}
-async function resolveBranchSelection(opts) {
-  if (opts.useBranch && opts.fromBranch) {
-    throw new UseBranchError(
-      "--use-branch and --from-branch are mutually exclusive: --use-branch reuses an existing branch, --from-branch forks a new box branch from a base ref. Pass only one."
-    );
-  }
-  if (opts.useBranch) {
-    return { useBranch: await resolveUseBranch(opts.useBranch, { repo: opts.repo }) };
-  }
-  if (opts.fromBranch) {
-    return { fromBranch: await resolveFromBranch(opts.fromBranch, { repo: opts.repo }) };
-  }
-  if (opts.providerName !== "docker" && opts.cloudUseCurrentBranch) {
-    const current = await currentHostBranch(opts.repo);
-    if (current) {
-      opts.log?.(`cloud.useCurrentBranch: starting box on host branch "${current}"`);
-      return { useBranch: current };
-    }
-    opts.log?.(
-      "cloud.useCurrentBranch is set but host HEAD is detached; forking a fresh branch instead"
-    );
-  }
-  return {};
-}
-
 // src/session-teleport/claude.ts
 import { mkdir, mkdtemp, readdir, readFile as readFile2, stat as stat3, writeFile } from "fs/promises";
 import { existsSync } from "fs";
-import { homedir as homedir3, tmpdir } from "os";
+import { homedir as homedir4, tmpdir } from "os";
 import { join as join5 } from "path";
 
 // src/session-teleport/cwd-encoding.ts
@@ -1352,7 +1391,7 @@ var TeleportError = class extends Error {
 // src/session-teleport/claude.ts
 var BOX_CLAUDE_PROJECTS_DIR = `/home/vscode/.claude/projects/${BOX_WORKSPACE_ENCODED}`;
 async function resolveClaudeTeleport(opts) {
-  const hostHome = opts.hostHome ?? homedir3();
+  const hostHome = opts.hostHome ?? homedir4();
   const projectDir = join5(
     hostHome,
     ".claude",
@@ -1439,10 +1478,10 @@ async function rewriteSessionFile(src, dst, hostCwd) {
 // src/session-teleport/codex.ts
 import { mkdtemp as mkdtemp2, readdir as readdir2, readFile as readFile3, stat as stat4, writeFile as writeFile2 } from "fs/promises";
 import { existsSync as existsSync2 } from "fs";
-import { homedir as homedir4, tmpdir as tmpdir2 } from "os";
+import { homedir as homedir5, tmpdir as tmpdir2 } from "os";
 import { join as join6 } from "path";
 async function resolveCodexTeleport(opts) {
-  const hostHome = opts.hostHome ?? homedir4();
+  const hostHome = opts.hostHome ?? homedir5();
   const sessionsRoot = join6(hostHome, ".codex", "sessions");
   if (!existsSync2(sessionsRoot)) {
     throw new TeleportError(
@@ -1649,29 +1688,29 @@ async function uploadTeleport(input) {
 }
 
 // src/lib/install-hint.ts
-import { log as log6 } from "@clack/prompts";
+import { log as log5 } from "@clack/prompts";
 import { existsSync as existsSync3, mkdirSync, writeFileSync } from "fs";
-import { homedir as homedir5 } from "os";
+import { homedir as homedir6 } from "os";
 import { join as join7 } from "path";
 function maybeShowInstallHint() {
   try {
-    const skill = join7(homedir5(), ".claude", "skills", "agentbox", "SKILL.md");
+    const skill = join7(homedir6(), ".claude", "skills", "agentbox", "SKILL.md");
     if (existsSync3(skill)) return;
-    const marker = join7(homedir5(), ".agentbox", "install-hint-shown");
+    const marker = join7(homedir6(), ".agentbox", "install-hint-shown");
     if (existsSync3(marker)) return;
-    mkdirSync(join7(homedir5(), ".agentbox"), { recursive: true });
+    mkdirSync(join7(homedir6(), ".agentbox"), { recursive: true });
     writeFileSync(marker, "");
-    log6.info("tip: run 'agentbox install' to enable the /agentbox fork command in host Claude");
+    log5.info("tip: run 'agentbox install' to enable the /agentbox fork command in host Claude");
   } catch {
   }
 }
 
 // src/lib/log-file.ts
 import { closeSync, mkdirSync as mkdirSync2, openSync, renameSync, symlinkSync, unlinkSync, writeFileSync as writeFileSync2, writeSync } from "fs";
-import { homedir as homedir6 } from "os";
+import { homedir as homedir7 } from "os";
 import { join as join8 } from "path";
 function stateDir() {
-  return process.env.AGENTBOX_HOME ?? join8(homedir6(), ".agentbox");
+  return process.env.AGENTBOX_HOME ?? join8(homedir7(), ".agentbox");
 }
 function logsDir() {
   return join8(stateDir(), "logs");
@@ -1795,7 +1834,7 @@ function resolveLimits(box, flags) {
 }
 
 // src/portless-prompt.ts
-import { confirm, isCancel as isCancel2, log as log7, spinner as spinner2 } from "@clack/prompts";
+import { confirm, isCancel as isCancel2, log as log6, spinner as spinner2 } from "@clack/prompts";
 async function setupPortlessHost() {
   let state = await detectPortless();
   if (!state.installed) {
@@ -1805,13 +1844,13 @@ async function setupPortlessHost() {
     resetPortlessCache();
     s2.stop(ok ? "portless installed" : "portless install failed");
     if (!ok) {
-      log7.warn(`Could not install Portless \u2014 run \`${portlessInstallHint()}\` yourself.`);
+      log6.warn(`Could not install Portless \u2014 run \`${portlessInstallHint()}\` yourself.`);
       return;
     }
     state = await detectPortless();
   }
   if (state.proxyRunning) {
-    log7.info("Portless proxy already running \u2014 boxes will use it.");
+    log6.info("Portless proxy already running \u2014 boxes will use it.");
     return;
   }
   const s = spinner2();
@@ -1823,7 +1862,7 @@ async function setupPortlessHost() {
     s.stop("portless proxy started");
   } else {
     s.stop("portless proxy did not start");
-    log7.warn(`Could not start the Portless proxy \u2014 run \`${portlessStartHint()}\` yourself.`);
+    log6.warn(`Could not start the Portless proxy \u2014 run \`${portlessStartHint()}\` yourself.`);
   }
 }
 async function maybePromptPortless(args) {
@@ -1838,7 +1877,7 @@ async function maybePromptPortless(args) {
   try {
     await setConfigValue("global", "portless.enabled", answer, args.cwd, { raw: false });
   } catch (err) {
-    log7.warn(
+    log6.warn(
       `Could not save the Portless preference: ${err instanceof Error ? err.message : String(err)}`
     );
   }
@@ -1847,18 +1886,18 @@ async function maybePromptPortless(args) {
 }
 
 // src/wizard.ts
-import { confirm as confirm2, isCancel as isCancel3, log as log8, multiselect } from "@clack/prompts";
+import { confirm as confirm2, isCancel as isCancel3, log as log7, multiselect } from "@clack/prompts";
 import { basename } from "path";
 
 // src/provider/cloud-backend.ts
 async function cloudBackendForProvider(provider) {
   switch (provider) {
     case "daytona":
-      return (await import("./dist-TMHSUVTP.js")).daytonaBackend;
+      return (await import("./dist-PJFJNXO2.js")).daytonaBackend;
     case "hetzner":
-      return (await import("./dist-5FQGYRW5.js")).hetznerBackend;
+      return (await import("./dist-4SUIXKSD.js")).hetznerBackend;
     case "vercel":
-      return (await import("./dist-PZW3GWWU.js")).vercelBackend;
+      return (await import("./dist-HT2YV6PB.js")).vercelBackend;
     default:
       return null;
   }
@@ -1909,7 +1948,7 @@ async function maybeRunSetupWizard(args) {
   const proj = await findProjectRoot(args.workspace);
   if (proj.hasAgentboxYaml) return { action: "proceed" };
   if (args.checkpointRef && await checkpointAppliesHere(args)) {
-    log8.info(`starting from checkpoint "${args.checkpointRef}"; skipping agentbox.yaml setup`);
+    log7.info(`starting from checkpoint "${args.checkpointRef}"; skipping agentbox.yaml setup`);
     return { action: "proceed" };
   }
   let envFilesToImport;
@@ -1998,7 +2037,7 @@ function logPrune(rebuild) {
   if (rebuild.prunedBytes <= 0) return;
   const mb = Math.round(rebuild.prunedBytes / 1024 / 1024);
   const n = rebuild.pruned.length;
-  log9.info(`pruned ${String(n)} stale plugin cache${n === 1 ? "" : "s"} (${String(mb)} MB freed)`);
+  log8.info(`pruned ${String(n)} stale plugin cache${n === 1 ? "" : "s"} (${String(mb)} MB freed)`);
 }
 var RELAY_HOST_URL = `http://127.0.0.1:${String(DEFAULT_RELAY_PORT)}`;
 async function attachClaudeWrapped(box, sessionName, reattach, onError, openIn) {
@@ -2062,7 +2101,7 @@ async function maybeRunClaudeLogin(args) {
   const message = args.authSource === "auth-file" ? "You're on a legacy API token (shows as 'Claude API'). Sign in with your Claude subscription instead?" : "Sign in with your Claude subscription? (saved and reused by every box)";
   const answer = await confirm3({ message, initialValue: true });
   if (isCancel4(answer) || !answer) {
-    log9.info("Skipped sign-in \u2014 claude will prompt you to /login inside the box.");
+    log8.info("Skipped sign-in \u2014 claude will prompt you to /login inside the box.");
     return;
   }
   const s = spinner3();
@@ -2076,10 +2115,10 @@ async function maybeRunClaudeLogin(args) {
   s.stop("image ready");
   const exitCode = await runClaudeLoginContainer(args.image, ["--claudeai"]);
   if (exitCode !== 0) {
-    log9.warn("Claude login did not complete; continuing \u2014 run `agentbox claude login` to retry.");
+    log8.warn("Claude login did not complete; continuing \u2014 run `agentbox claude login` to retry.");
     return;
   }
-  log9.success("Signed in with your Claude subscription \u2014 saved for future boxes.");
+  log8.success("Signed in with your Claude subscription \u2014 saved for future boxes.");
 }
 async function maybeRunCloudClaudeLogin(args) {
   if (!process.stdin.isTTY || args.yes) return;
@@ -2090,7 +2129,7 @@ async function maybeRunCloudClaudeLogin(args) {
   const message = expired ? "Your saved Claude login looks expired. Sign in again? (saved and reused by every box)" : "Sign in with your Claude subscription? (saved and reused by every box)";
   const answer = await confirm3({ message, initialValue: true });
   if (isCancel4(answer) || !answer) {
-    log9.info("Skipped sign-in \u2014 claude will prompt you to /login inside the box.");
+    log8.info("Skipped sign-in \u2014 claude will prompt you to /login inside the box.");
     return;
   }
   const s = spinner3();
@@ -2104,10 +2143,10 @@ async function maybeRunCloudClaudeLogin(args) {
   s.stop("image ready");
   const exitCode = await runClaudeLoginContainer(args.image, ["--claudeai"]);
   if (exitCode !== 0) {
-    log9.warn("Claude login did not complete; continuing \u2014 run `agentbox claude login` to retry.");
+    log8.warn("Claude login did not complete; continuing \u2014 run `agentbox claude login` to retry.");
     return;
   }
-  log9.success("Signed in with your Claude subscription \u2014 saved for future boxes.");
+  log8.success("Signed in with your Claude subscription \u2014 saved for future boxes.");
 }
 var claudeCommand = new Command2("claude").description("Create a sandboxed box and launch Claude Code in a detachable tmux session").option("-w, --workspace <path>", "host workspace to mount", process.cwd()).option("-n, --name <name>", "friendly box name (default: <workspace-basename>-<id>)").option("--host-snapshot", "APFS-clone the host workspace into a per-box scratch dir before seeding /workspace (stabilizes the tar-pipe source)").option("--no-host-snapshot", "tar-pipe directly from the live host workspace at create time").option(
   "--snapshot <ref>",
@@ -2174,14 +2213,14 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
   intro("Starting Claude in a box...");
   let resumeMode = null;
   if (opts.continue === true && opts.resume) {
-    log9.error("only one of -c / --continue / --resume can be passed");
+    log8.error("only one of -c / --continue / --resume can be passed");
     cmdLog.close();
     process.exit(2);
   }
   if (opts.continue === true) resumeMode = { kind: "continue" };
   else if (opts.resume) resumeMode = { kind: "resume", id: opts.resume };
   if (resumeMode && opts.initialPrompt && opts.initialPrompt.length > 0) {
-    log9.error("-i / --initial-prompt cannot be combined with -c / --resume (seeding a new turn into a resumed session is not supported).");
+    log8.error("-i / --initial-prompt cannot be combined with -c / --resume (seeding a new turn into a resumed session is not supported).");
     cmdLog.close();
     process.exit(2);
   }
@@ -2196,7 +2235,7 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
       });
     } catch (err) {
       if (err instanceof TeleportError) {
-        log9.error(err.message);
+        log8.error(err.message);
         cmdLog.close();
         process.exit(2);
       }
@@ -2211,7 +2250,7 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
   const isCloud = providerName !== "docker";
   if (opts.initialPrompt && opts.initialPrompt.length > 0) {
     if (isCloud) {
-      log9.error("-i / --initial-prompt is currently docker-only (cloud sessions only start on attach).");
+      log8.error("-i / --initial-prompt is currently docker-only (cloud sessions only start on attach).");
       cmdLog.close();
       process.exit(2);
     }
@@ -2222,7 +2261,7 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
       });
     } catch (err) {
       if (err instanceof MissingAgentCredsError) {
-        log9.error(err.message);
+        log8.error(err.message);
         cmdLog.close();
         process.exit(2);
       }
@@ -2240,7 +2279,7 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
       maxRunningOverride,
       maxWorkingOverride
     });
-    outro2(
+    outro(
       `job ${result.job.id} queued (${String(result.runningCount)}/${String(result.maxConcurrent)} running); log: ${result.job.logPath}`
     );
     cmdLog.close();
@@ -2280,13 +2319,13 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
       onLog: (line) => cmdLog.write(line)
     });
     if (gate.decision === "cancel") {
-      log9.warn("carry: cancelled \u2014 not creating the box");
+      log8.warn("carry: cancelled \u2014 not creating the box");
       cmdLog.close();
       process.exit(0);
     }
     if (gate.decision === "approve") carryEntries = gate.entries;
   } catch (err) {
-    log9.error(err instanceof Error ? err.message : String(err));
+    log8.error(err instanceof Error ? err.message : String(err));
     cmdLog.close();
     process.exit(1);
   }
@@ -2316,7 +2355,7 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
     }));
   } catch (err) {
     if (err instanceof FromBranchError || err instanceof UseBranchError) {
-      log9.error(err.message);
+      log8.error(err.message);
       cmdLog.close();
       process.exit(2);
     }
@@ -2360,7 +2399,7 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
           return { agentArgsPrefix: resumePrepared.forwardArgs };
         } catch (err) {
           if (err instanceof TeleportError) {
-            log9.error(err.message);
+            log8.error(err.message);
             cmdLog.close();
             process.exit(2);
           }
@@ -2430,8 +2469,8 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
       } catch (err) {
         if (err instanceof TeleportError) {
           s.stop("teleport failed");
-          log9.error(err.message);
-          log9.info(
+          log8.error(err.message);
+          log8.info(
             `The box ${result.record.container} is up but unused. Destroy it with: agentbox destroy ${result.record.container} -y`
           );
           cmdLog.close();
@@ -2448,20 +2487,26 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
       boxName: result.record.name
     });
     const nSuffix = typeof result.record.projectIndex === "number" ? `  \xB7  n ${String(result.record.projectIndex)}` : "";
-    s.stop(`box ${result.record.container} ready${nSuffix}`);
+    s.stop(`box ready${nSuffix}`);
     logPrune(rebuild);
     for (const f of rebuild.failed) {
-      log9.warn(`plugin install failed for ${f.dir}; claude may still load it. stderr:
+      log8.warn(`plugin install failed for ${f.dir}; claude may still load it. stderr:
 ${f.stderr.trim()}`);
     }
     maybeShowInstallHint();
+    await printLaunchRecap({
+      record: result.record,
+      mode: "claude",
+      reattach: reattachRef(result.record),
+      workspacePath: opts.workspace,
+      fromBranch,
+      useBranch,
+      checkpointRef,
+      attaching: opts.attach !== false
+    });
     if (opts.attach === false) {
-      outro2(
-        `session started \u2014 attach with: agentbox claude attach ${reattachRef(result.record)}`
-      );
       return;
     }
-    outro2("attaching \u2014 Control+a d to detach, leaves claude running");
     await attachClaudeWrapped(
       result.record,
       sessionName,
@@ -2473,10 +2518,10 @@ ${f.stderr.trim()}`);
     s.stop("failed");
     cmdLog.write(`FAIL: ${err instanceof Error ? err.stack ?? err.message : String(err)}`);
     if (err instanceof ClaudeSessionError) {
-      log9.error(err.message);
+      log8.error(err.message);
       if (containerName) {
-        log9.info(`The box ${containerName} is still running. Destroy it with:`);
-        log9.info(`  agentbox destroy ${containerName} -y`);
+        log8.info(`The box ${containerName} is still running. Destroy it with:`);
+        log8.info(`  agentbox destroy ${containerName} -y`);
       }
       cmdLog.close();
       process.exit(1);
@@ -2514,12 +2559,12 @@ async function startOrAttachClaude(box, claudeArgs, opts, resumePrepared) {
       );
     }
     if (!wantAttach) {
-      outro2(
+      outro(
         `session "${sessionName}" already running \u2014 attach with: agentbox claude attach ${reattachRef(box)}`
       );
       return;
     }
-    outro2(`session "${sessionName}" already running \u2014 attaching (Control+a d to detach)`);
+    outro(`session "${sessionName}" already running \u2014 attaching (Control+a d to detach)`);
     await attachClaudeWrapped(box, sessionName, reattachRef(box), void 0, openIn);
     return;
   }
@@ -2577,7 +2622,7 @@ async function startOrAttachClaude(box, claudeArgs, opts, resumePrepared) {
     } catch (err) {
       if (err instanceof TeleportError) {
         s.stop("teleport failed");
-        log9.error(err.message);
+        log8.error(err.message);
         process.exit(2);
       }
       throw err;
@@ -2593,16 +2638,16 @@ async function startOrAttachClaude(box, claudeArgs, opts, resumePrepared) {
   s.stop(`box ${box.container} ready`);
   logPrune(rebuild);
   for (const f of rebuild.failed) {
-    log9.warn(`plugin install failed for ${f.dir}; claude may still load it. stderr:
+    log8.warn(`plugin install failed for ${f.dir}; claude may still load it. stderr:
 ${f.stderr.trim()}`);
   }
   if (!wantAttach) {
-    outro2(
+    outro(
       `session "${sessionName}" started \u2014 attach with: agentbox claude attach ${reattachRef(box)}`
     );
     return;
   }
-  outro2("attaching \u2014 Control+a d to detach, leaves claude running");
+  outro("attaching \u2014 Control+a d to detach, leaves claude running");
   await attachClaudeWrapped(box, sessionName, reattachRef(box), void 0, openIn);
 }
 var claudeAttachCommand = new Command2("attach").description(
@@ -2632,7 +2677,7 @@ var claudeAttachCommand = new Command2("attach").description(
     await startOrAttachClaude(box, [], { ...opts, syncConfig: false });
   } catch (err) {
     if (err instanceof ClaudeSessionError) {
-      log9.error(err.message);
+      log8.error(err.message);
       process.exit(1);
     }
     handleLifecycleError(err);
@@ -2664,7 +2709,7 @@ var claudeStartCommand = new Command2("start").description(
     let effectiveClaudeArgs = shifted && idOrName ? [idOrName, ...claudeArgs] : claudeArgs;
     let resumeMode = null;
     if (opts.continue === true && opts.resume) {
-      log9.error("only one of -c / --continue / --resume can be passed");
+      log8.error("only one of -c / --continue / --resume can be passed");
       process.exit(2);
     }
     if (opts.continue === true) resumeMode = { kind: "continue" };
@@ -2679,7 +2724,7 @@ var claudeStartCommand = new Command2("start").description(
         });
       } catch (err) {
         if (err instanceof TeleportError) {
-          log9.error(err.message);
+          log8.error(err.message);
           process.exit(2);
         }
         throw err;
@@ -2687,7 +2732,7 @@ var claudeStartCommand = new Command2("start").description(
     }
     if ((box.provider ?? "docker") !== "docker") {
       if (opts.attach === false) {
-        outro2(
+        outro(
           `--no-attach: cloud agent sessions are started lazily on attach. Run: agentbox claude attach ${reattachRef(box)}`
         );
         return;
@@ -2706,7 +2751,7 @@ var claudeStartCommand = new Command2("start").description(
           effectiveClaudeArgs = [...resumePrepared.forwardArgs, ...effectiveClaudeArgs];
         } catch (err) {
           if (err instanceof TeleportError) {
-            log9.error(err.message);
+            log8.error(err.message);
             process.exit(2);
           }
           throw err;
@@ -2725,7 +2770,7 @@ var claudeStartCommand = new Command2("start").description(
     await startOrAttachClaude(box, effectiveClaudeArgs, opts, resumePrepared);
   } catch (err) {
     if (err instanceof ClaudeSessionError) {
-      log9.error(err.message);
+      log8.error(err.message);
       process.exit(1);
     }
     handleLifecycleError(err);
@@ -2739,7 +2784,7 @@ var claudeLoginCommand = new Command2("login").description(
 ).action(async (args) => {
   intro("Signing in to Claude...");
   if (!process.stdin.isTTY) {
-    log9.error("`agentbox claude login` needs an interactive terminal.");
+    log8.error("`agentbox claude login` needs an interactive terminal.");
     process.exit(1);
   }
   try {
@@ -2751,10 +2796,10 @@ var claudeLoginCommand = new Command2("login").description(
     s.stop("image ready");
     const exitCode = await runClaudeLoginContainer(image, args);
     if (exitCode !== 0) {
-      log9.warn(`\`claude auth login\` exited with code ${String(exitCode)}`);
+      log8.warn(`\`claude auth login\` exited with code ${String(exitCode)}`);
       process.exit(exitCode);
     }
-    outro2("signed in \u2014 credentials saved for future boxes");
+    outro("signed in \u2014 credentials saved for future boxes");
   } catch (err) {
     handleLifecycleError(err);
   }
@@ -2764,17 +2809,17 @@ claudeCommand.addCommand(claudeStartCommand);
 claudeCommand.addCommand(claudeLoginCommand);
 
 // src/commands/checkpoint.ts
-import { confirm as confirm4, isCancel as isCancel5, log as log10 } from "@clack/prompts";
+import { confirm as confirm4, isCancel as isCancel5, log as log9 } from "@clack/prompts";
 import { Command as Command3 } from "commander";
 var CLOUD_BACKENDS = ["daytona", "hetzner", "vercel"];
 async function cloudProviderFor(backend) {
   switch (backend) {
     case "daytona":
-      return (await import("./dist-TMHSUVTP.js")).daytonaProvider;
+      return (await import("./dist-PJFJNXO2.js")).daytonaProvider;
     case "hetzner":
-      return (await import("./dist-5FQGYRW5.js")).hetznerProvider;
+      return (await import("./dist-4SUIXKSD.js")).hetznerProvider;
     case "vercel":
-      return (await import("./dist-PZW3GWWU.js")).vercelProvider;
+      return (await import("./dist-HT2YV6PB.js")).vercelProvider;
   }
 }
 var CHECKPOINT_NOTICE = "Checkpoint in progress \u2014 the box will be unresponsive for a moment";
@@ -2798,10 +2843,10 @@ var createSub = new Command3("create").description("Capture a box state as a pro
     }
     const insp = await inspectBox(box.id);
     if (insp.state === "paused") {
-      log10.info("box is paused; unpausing");
+      log9.info("box is paused; unpausing");
       await unpauseBox(box.id);
     } else if (insp.state === "stopped") {
-      log10.info("box is stopped; starting");
+      log9.info("box is stopped; starting");
       await startBox(box.id);
     } else if (insp.state === "missing") {
       throw new Error(`box ${box.name} has no container; was it destroyed?`);
@@ -2836,13 +2881,13 @@ var createSub = new Command3("create").description("Capture a box state as a pro
         setDefault: opts.setDefault === true,
         replace: opts.replace === true,
         maxLayers: cfg.effective.checkpoint.maxLayers,
-        onLog: (line) => log10.info(line)
+        onLog: (line) => log9.info(line)
       });
-      log10.success(
+      log9.success(
         `checkpoint ${info.name} (${info.manifest.type}) -> ${info.dir}` + (opts.setDefault ? "  [project default]" : "")
       );
       if (!opts.setDefault) {
-        log10.info(
+        log9.info(
           `make it the default for new boxes: agentbox checkpoint set-default ${info.name}`
         );
       }
@@ -2957,7 +3002,7 @@ var rmSub = new Command3("rm").description("Delete a checkpoint (any provider th
     if (!opts.yes) {
       const ok = await confirm4({ message: `Delete checkpoint ${ref}?`, initialValue: false });
       if (isCancel5(ok) || !ok) {
-        log10.info("cancelled");
+        log9.info("cancelled");
         return;
       }
     }
@@ -2978,7 +3023,7 @@ var rmSub = new Command3("rm").description("Delete a checkpoint (any provider th
         process.stdout.write(`removed ${backend} checkpoint ${ref}
 `);
       } catch (err) {
-        log10.warn(
+        log9.warn(
           `${backend} checkpoint remove failed: ${err instanceof Error ? err.message : String(err)}`
         );
       }
@@ -2996,9 +3041,9 @@ var rmSub = new Command3("rm").description("Delete a checkpoint (any provider th
     for (const [key, projectValue, effectiveValue] of defKeys) {
       if (projectValue === ref) {
         await unsetConfigValue("project", key, projectRoot);
-        log10.info(`cleared project ${key} (was ${ref})`);
+        log9.info(`cleared project ${key} (was ${ref})`);
       } else if (effectiveValue === ref) {
-        log10.warn(
+        log9.warn(
           `${key} = ${ref} is set outside the per-project config (global or agentbox.yaml defaults) \u2014 clear it manually`
         );
       }
@@ -3009,17 +3054,17 @@ var rmSub = new Command3("rm").description("Delete a checkpoint (any provider th
 });
 async function runCloudCheckpointCreate(box, opts) {
   if (opts.merged) {
-    log10.warn("--merged is Docker-only (cloud snapshots are always flattened); ignoring");
+    log9.warn("--merged is Docker-only (cloud snapshots are always flattened); ignoring");
   }
   const projectRoot = await projectRootFor(box.workspacePath, box.projectRoot);
   const name = opts.name ?? `${box.name}-${String(Date.now()).slice(-6)}`;
   const provider = await providerForBox(box);
   const state = await provider.probeState(box);
   if (state === "paused") {
-    log10.info("box is paused; resuming");
+    log9.info("box is paused; resuming");
     await provider.resume(box);
   } else if (state === "stopped") {
-    log10.info("box is stopped; starting");
+    log9.info("box is stopped; starting");
     await provider.start(box);
   } else if (state === "missing") {
     throw new Error(`cloud sandbox for ${box.name} is missing; was it deleted?`);
@@ -3033,7 +3078,7 @@ async function runCloudCheckpointCreate(box, opts) {
       initialValue: false
     });
     if (isCancel5(ok) || !ok) {
-      log10.info("cancelled");
+      log9.info("cancelled");
       return;
     }
   }
@@ -3048,21 +3093,21 @@ async function runCloudCheckpointCreate(box, opts) {
       try {
         const saved = await provider.extractAgentCredentials(box);
         if (saved.length > 0) {
-          log10.info(`saved ${saved.join(", ")} login to ~/.agentbox for future boxes`);
+          log9.info(`saved ${saved.join(", ")} login to ~/.agentbox for future boxes`);
         }
       } catch (err) {
-        log10.warn(`agent credential extract skipped: ${err instanceof Error ? err.message : String(err)}`);
+        log9.warn(`agent credential extract skipped: ${err instanceof Error ? err.message : String(err)}`);
       }
     }
-    log10.info(`capturing cloud snapshot '${name}' (this may take a few minutes)`);
+    log9.info(`capturing cloud snapshot '${name}' (this may take a few minutes)`);
     const result = await provider.checkpoint.create(box, name);
-    log10.success(`checkpoint ${result.ref} (daytona snapshot) captured`);
+    log9.success(`checkpoint ${result.ref} (daytona snapshot) captured`);
     if (opts.setDefault) {
       const key = defaultCheckpointConfigKey(box.provider ?? "daytona");
       await setConfigValue("project", key, result.ref, projectRoot);
-      log10.info(`set project default checkpoint (${key}) -> ${result.ref}`);
+      log9.info(`set project default checkpoint (${key}) -> ${result.ref}`);
     } else {
-      log10.info(
+      log9.info(
         `make it the default for new boxes: agentbox checkpoint set-default --provider ${box.provider ?? "daytona"} ${result.ref}`
       );
     }
@@ -3074,15 +3119,15 @@ var checkpointCommand = new Command3("checkpoint").alias("checkpoints").descript
 
 // src/commands/code.ts
 import { spawn } from "child_process";
-import { log as log11 } from "@clack/prompts";
+import { log as log10 } from "@clack/prompts";
 import { Command as Command4, InvalidArgumentError } from "commander";
 
 // src/ssh-config.ts
 import { promises as fs } from "fs";
-import { homedir as homedir7 } from "os";
+import { homedir as homedir8 } from "os";
 import { join as join9 } from "path";
 function sshConfigPath() {
-  return join9(homedir7(), ".ssh", "config");
+  return join9(homedir8(), ".ssh", "config");
 }
 function beginMarker(alias) {
   return `# BEGIN agentbox cloud box ${alias}`;
@@ -3133,7 +3178,7 @@ function buildBlock(opts) {
 }
 async function writeAgentboxSshAlias(opts) {
   const path = sshConfigPath();
-  await fs.mkdir(join9(homedir7(), ".ssh"), { recursive: true, mode: 448 });
+  await fs.mkdir(join9(homedir8(), ".ssh"), { recursive: true, mode: 448 });
   const existing = await readConfig();
   const stripped = stripBlock(existing, opts.alias);
   const separator = stripped.length === 0 || stripped.endsWith("\n") ? "" : "\n";
@@ -3215,11 +3260,11 @@ var codeCommand = new Command4("code").description("Open a box in VS Code or Cur
     }
     const exit = await launchIde(folderUri, forcedIde);
     if (exit.code !== 0) {
-      log11.error(`failed to launch ${exit.flavor ? ideProfile(exit.flavor).displayName : "IDE"} via ${exit.via} (exit ${String(exit.code)})`);
+      log10.error(`failed to launch ${exit.flavor ? ideProfile(exit.flavor).displayName : "IDE"} via ${exit.via} (exit ${String(exit.code)})`);
       process.stdout.write(folderUri + "\n");
       process.exit(1);
     }
-    log11.success(
+    log10.success(
       `opening ${box.name} in ${ideProfile(exit.flavor).displayName} (${exit.via})`
     );
   } catch (err) {
@@ -3229,10 +3274,10 @@ var codeCommand = new Command4("code").description("Open a box in VS Code or Cur
 async function prepareDockerAttach(box, opts) {
   const insp = await inspectBox(box.id);
   if (insp.state === "paused") {
-    log11.info(`box is paused; unpausing`);
+    log10.info(`box is paused; unpausing`);
     await unpauseBox(box.id);
   } else if (insp.state === "stopped") {
-    log11.info(`box is stopped; starting`);
+    log10.info(`box is stopped; starting`);
     await startBox(box.id);
   } else if (insp.state === "missing") {
     throw new Error(`box ${box.name} has no container; was it destroyed?`);
@@ -3243,9 +3288,9 @@ async function prepareDockerAttach(box, opts) {
       const lines = [];
       if (reply.timedOut.length > 0) lines.push(`timed out: ${reply.timedOut.join(", ")}`);
       if (reply.failed.length > 0) lines.push(`failed: ${reply.failed.join(", ")}`);
-      log11.warn(`box not fully ready (${lines.join("; ")}). Opening anyway.`);
+      log10.warn(`box not fully ready (${lines.join("; ")}). Opening anyway.`);
     } else {
-      log11.success("all units ready");
+      log10.success("all units ready");
     }
   }
   if (opts.autoTerminals) {
@@ -3255,14 +3300,14 @@ async function prepareDockerAttach(box, opts) {
         regen: opts.regenTasks
       });
       if (r.status === "wrote") {
-        log11.info(`wrote /workspace/.vscode/tasks.json (${String(services.length)} service(s))`);
+        log10.info(`wrote /workspace/.vscode/tasks.json (${String(services.length)} service(s))`);
       } else if (r.status === "skipped-user-owned") {
-        log11.warn(
+        log10.warn(
           "user-owned .vscode/tasks.json detected; skipping auto-terminals (pass --regen-tasks to overwrite)"
         );
       }
     } catch (err) {
-      log11.warn(
+      log10.warn(
         `auto-terminals failed: ${err instanceof Error ? err.message : String(err)}`
       );
     }
@@ -3274,10 +3319,10 @@ async function prepareCloudAttach(box, opts) {
   const p = await providerForBox(box);
   const state = await p.probeState(box);
   if (state === "paused") {
-    log11.info("box is paused; resuming");
+    log10.info("box is paused; resuming");
     await p.resume(box);
   } else if (state === "stopped") {
-    log11.info("box is stopped; starting");
+    log10.info("box is stopped; starting");
     await p.start(box);
   } else if (state === "missing") {
     throw new Error(`cloud sandbox for ${box.name} is missing; was it deleted?`);
@@ -3290,12 +3335,12 @@ async function prepareCloudAttach(box, opts) {
         const lines = [];
         if (reply.timedOut.length > 0) lines.push(`timed out: ${reply.timedOut.join(", ")}`);
         if (reply.failed.length > 0) lines.push(`failed: ${reply.failed.join(", ")}`);
-        log11.warn(`box not fully ready (${lines.join("; ")}). Opening anyway.`);
+        log10.warn(`box not fully ready (${lines.join("; ")}). Opening anyway.`);
       } else {
-        log11.success("all units ready");
+        log10.success("all units ready");
       }
     } catch (err) {
-      log11.warn(`wait-ready failed (continuing): ${err instanceof Error ? err.message : String(err)}`);
+      log10.warn(`wait-ready failed (continuing): ${err instanceof Error ? err.message : String(err)}`);
     }
   }
   if (!p.buildAttach) {
@@ -3317,7 +3362,7 @@ async function prepareCloudAttach(box, opts) {
     user: target.user,
     identityFile: target.identityFile
   });
-  log11.info(`updated ~/.ssh/config alias ${alias}`);
+  log10.info(`updated ~/.ssh/config alias ${alias}`);
   return `vscode-remote://ssh-remote+${alias}/workspace`;
 }
 async function runWaitReadyDocker(container, timeoutMs) {
@@ -3342,7 +3387,7 @@ async function launchIde(folderUri, forced) {
   if (code !== null) return code;
   const cursor = await tryCli("cursor", folderUri);
   if (cursor !== null) return cursor;
-  log11.warn("neither `code` nor `cursor` found in PATH; falling back to `open vscode://...`");
+  log10.warn("neither `code` nor `cursor` found in PATH; falling back to `open vscode://...`");
   return launchOne("vscode", folderUri);
 }
 async function tryCli(flavor, folderUri) {
@@ -3355,11 +3400,11 @@ async function launchOne(flavor, folderUri) {
   const profile = ideProfile(flavor);
   const cliCode = await spawnCommand(profile.cli, ["--folder-uri", folderUri]);
   if (cliCode !== 127) return { code: cliCode, flavor, via: "cli" };
-  log11.warn(
-    `\`${profile.cli}\` not found in PATH; falling back to \`open ${profile.protocolScheme}://...\` (the %2B URL-encoding bug may break attach)`
+  log10.warn(
+    `\`${profile.cli}\` not found in PATH; falling back to \`${hostOpenCommand()} ${profile.protocolScheme}://...\` (the %2B URL-encoding bug may break attach)`
   );
   const url = `${profile.protocolScheme}://${folderUri.replace(/^vscode-remote:\/\//, "vscode-remote/")}`;
-  const fallback = await spawnCommand("open", [url]);
+  const fallback = await spawnCommand(hostOpenCommand(), [url]);
   return { code: fallback, flavor, via: "open" };
 }
 function spawnCommand(cmd, args) {
@@ -3384,9 +3429,9 @@ async function fetchServiceNamesDocker(container) {
 
 // src/commands/codex.ts
 import { access } from "fs/promises";
-import { homedir as homedir8 } from "os";
+import { homedir as homedir9 } from "os";
 import { join as join10 } from "path";
-import { confirm as confirm5, intro as intro2, isCancel as isCancel6, log as log12, outro as outro3, spinner as spinner4 } from "@clack/prompts";
+import { confirm as confirm5, intro as intro2, isCancel as isCancel6, log as log11, outro as outro2, spinner as spinner4 } from "@clack/prompts";
 import { Command as Command5 } from "commander";
 function reattachRef2(r) {
   return typeof r.projectIndex === "number" ? String(r.projectIndex) : r.name;
@@ -3463,7 +3508,7 @@ async function maybeRunCodexLogin(args) {
     initialValue: true
   });
   if (isCancel6(answer) || !answer) {
-    log12.info("Skipped sign-in \u2014 codex will prompt you to sign in inside the box.");
+    log11.info("Skipped sign-in \u2014 codex will prompt you to sign in inside the box.");
     return;
   }
   const s = spinner4();
@@ -3474,14 +3519,14 @@ async function maybeRunCodexLogin(args) {
   s.stop("image ready");
   const exitCode = await runCodexLoginContainer(args.image, []);
   if (exitCode !== 0) {
-    log12.warn("Codex login did not complete; continuing \u2014 run `agentbox codex login` to retry.");
+    log11.warn("Codex login did not complete; continuing \u2014 run `agentbox codex login` to retry.");
     return;
   }
-  log12.success("Signed in to Codex \u2014 saved for future boxes.");
+  log11.success("Signed in to Codex \u2014 saved for future boxes.");
 }
 async function cloudCodexCredAvailable(env = process.env) {
   if ((env["OPENAI_API_KEY"] ?? "").length > 0) return true;
-  for (const p of [CODEX_CREDENTIALS_BACKUP_FILE, join10(homedir8(), ".codex", "auth.json")]) {
+  for (const p of [CODEX_CREDENTIALS_BACKUP_FILE, join10(homedir9(), ".codex", "auth.json")]) {
     try {
       await access(p);
       return true;
@@ -3498,7 +3543,7 @@ async function maybeRunCloudCodexLogin(args) {
     initialValue: true
   });
   if (isCancel6(answer) || !answer) {
-    log12.info("Skipped sign-in \u2014 codex will prompt you to sign in inside the box.");
+    log11.info("Skipped sign-in \u2014 codex will prompt you to sign in inside the box.");
     return;
   }
   const s = spinner4();
@@ -3509,12 +3554,12 @@ async function maybeRunCloudCodexLogin(args) {
   s.stop("image ready");
   const exitCode = await runCodexLoginContainer(args.image, []);
   if (exitCode !== 0) {
-    log12.warn("Codex login did not complete; continuing \u2014 run `agentbox codex login` to retry.");
+    log11.warn("Codex login did not complete; continuing \u2014 run `agentbox codex login` to retry.");
     return;
   }
   const { copied } = await extractCodexCredentials(SHARED_CODEX_VOLUME, args.image);
-  if (copied) log12.success("Signed in to Codex \u2014 saved for future boxes.");
-  else log12.warn("Codex login finished but no auth.json was captured \u2014 sign in inside the box if needed.");
+  if (copied) log11.success("Signed in to Codex \u2014 saved for future boxes.");
+  else log11.warn("Codex login finished but no auth.json was captured \u2014 sign in inside the box if needed.");
 }
 var codexCommand = new Command5("codex").description("Create a sandboxed box and launch OpenAI Codex in a detachable tmux session").option("-w, --workspace <path>", "host workspace to mount", process.cwd()).option("-n, --name <name>", "friendly box name (default: <workspace-basename>-<id>)").option("--host-snapshot", "APFS-clone the host workspace into a per-box scratch dir before seeding /workspace (stabilizes the tar-pipe source)").option("--no-host-snapshot", "tar-pipe directly from the live host workspace at create time").option(
   "--snapshot <ref>",
@@ -3581,14 +3626,14 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
   intro2("Starting Codex in a box...");
   let resumeMode = null;
   if (opts.continue === true && opts.resume) {
-    log12.error("only one of -c / --continue / --resume can be passed");
+    log11.error("only one of -c / --continue / --resume can be passed");
     cmdLog.close();
     process.exit(2);
   }
   if (opts.continue === true) resumeMode = { kind: "continue" };
   else if (opts.resume) resumeMode = { kind: "resume", id: opts.resume };
   if (resumeMode && opts.initialPrompt && opts.initialPrompt.length > 0) {
-    log12.error("-i / --initial-prompt cannot be combined with -c / --resume.");
+    log11.error("-i / --initial-prompt cannot be combined with -c / --resume.");
     cmdLog.close();
     process.exit(2);
   }
@@ -3603,7 +3648,7 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
       });
     } catch (err) {
       if (err instanceof TeleportError) {
-        log12.error(err.message);
+        log11.error(err.message);
         cmdLog.close();
         process.exit(2);
       }
@@ -3620,7 +3665,7 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
   const checkpointRef = opts.snapshot && opts.snapshot.length > 0 ? opts.snapshot : providerDefault.length > 0 ? providerDefault : void 0;
   if (opts.initialPrompt && opts.initialPrompt.length > 0) {
     if (isCloud) {
-      log12.error("-i / --initial-prompt is currently docker-only (cloud sessions only start on attach).");
+      log11.error("-i / --initial-prompt is currently docker-only (cloud sessions only start on attach).");
       cmdLog.close();
       process.exit(2);
     }
@@ -3631,7 +3676,7 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
       });
     } catch (err) {
       if (err instanceof MissingAgentCredsError) {
-        log12.error(err.message);
+        log11.error(err.message);
         cmdLog.close();
         process.exit(2);
       }
@@ -3649,7 +3694,7 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
       maxRunningOverride,
       maxWorkingOverride
     });
-    outro3(
+    outro2(
       `job ${result.job.id} queued (${String(result.runningCount)}/${String(result.maxConcurrent)} running); log: ${result.job.logPath}`
     );
     cmdLog.close();
@@ -3665,13 +3710,13 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
       onLog: (line) => cmdLog.write(line)
     });
     if (gate.decision === "cancel") {
-      log12.warn("carry: cancelled \u2014 not creating the box");
+      log11.warn("carry: cancelled \u2014 not creating the box");
       cmdLog.close();
       process.exit(0);
     }
     if (gate.decision === "approve") carryEntries = gate.entries;
   } catch (err) {
-    log12.error(err instanceof Error ? err.message : String(err));
+    log11.error(err instanceof Error ? err.message : String(err));
     cmdLog.close();
     process.exit(1);
   }
@@ -3688,7 +3733,7 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
     }));
   } catch (err) {
     if (err instanceof FromBranchError || err instanceof UseBranchError) {
-      log12.error(err.message);
+      log11.error(err.message);
       cmdLog.close();
       process.exit(2);
     }
@@ -3732,7 +3777,7 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
           return { agentArgsPrefix: resumePrepared.forwardArgs };
         } catch (err) {
           if (err instanceof TeleportError) {
-            log12.error(err.message);
+            log11.error(err.message);
             cmdLog.close();
             process.exit(2);
           }
@@ -3807,8 +3852,8 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
       } catch (err) {
         if (err instanceof TeleportError) {
           s.stop("teleport failed");
-          log12.error(err.message);
-          log12.info(
+          log11.error(err.message);
+          log11.info(
             `The box ${result.record.container} is up but unused. Destroy it with: agentbox destroy ${result.record.container} -y`
           );
           cmdLog.close();
@@ -3824,14 +3869,20 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
       sessionName
     });
     const nSuffix = typeof result.record.projectIndex === "number" ? `  \xB7  n ${String(result.record.projectIndex)}` : "";
-    s.stop(`box ${result.record.container} ready${nSuffix}`);
+    s.stop(`box ready${nSuffix}`);
+    await printLaunchRecap({
+      record: result.record,
+      mode: "codex",
+      reattach: reattachRef2(result.record),
+      workspacePath: opts.workspace,
+      fromBranch,
+      useBranch,
+      checkpointRef,
+      attaching: opts.attach !== false
+    });
     if (opts.attach === false) {
-      outro3(
-        `session started \u2014 attach with: agentbox codex attach ${reattachRef2(result.record)}`
-      );
       return;
     }
-    outro3("attaching \u2014 Control+a d to detach, leaves codex running");
     await attachCodexWrapped(
       result.record,
       sessionName,
@@ -3843,10 +3894,10 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
     s.stop("failed");
     cmdLog.write(`FAIL: ${err instanceof Error ? err.stack ?? err.message : String(err)}`);
     if (err instanceof CodexSessionError) {
-      log12.error(err.message);
+      log11.error(err.message);
       if (containerName) {
-        log12.info(`The box ${containerName} is still running. Destroy it with:`);
-        log12.info(`  agentbox destroy ${containerName} -y`);
+        log11.info(`The box ${containerName} is still running. Destroy it with:`);
+        log11.info(`  agentbox destroy ${containerName} -y`);
       }
       cmdLog.close();
       process.exit(1);
@@ -3883,12 +3934,12 @@ async function startOrAttachCodex(box, codexArgs, opts, resumePrepared) {
       );
     }
     if (!wantAttach) {
-      outro3(
+      outro2(
         `session "${sessionName}" already running \u2014 attach with: agentbox codex attach ${reattachRef2(box)}`
       );
       return;
     }
-    outro3(`session "${sessionName}" already running \u2014 attaching (Control+a d to detach)`);
+    outro2(`session "${sessionName}" already running \u2014 attaching (Control+a d to detach)`);
     await attachCodexWrapped(box, sessionName, reattachRef2(box), void 0, openIn);
     return;
   }
@@ -3932,7 +3983,7 @@ async function startOrAttachCodex(box, codexArgs, opts, resumePrepared) {
     } catch (err) {
       if (err instanceof TeleportError) {
         s.stop("teleport failed");
-        log12.error(err.message);
+        log11.error(err.message);
         process.exit(2);
       }
       throw err;
@@ -3942,12 +3993,12 @@ async function startOrAttachCodex(box, codexArgs, opts, resumePrepared) {
   await startCodexSession({ container: box.container, codexArgs: effectiveArgs, sessionName });
   s.stop(`box ${box.container} ready`);
   if (!wantAttach) {
-    outro3(
+    outro2(
       `session "${sessionName}" started \u2014 attach with: agentbox codex attach ${reattachRef2(box)}`
     );
     return;
   }
-  outro3("attaching \u2014 Control+a d to detach, leaves codex running");
+  outro2("attaching \u2014 Control+a d to detach, leaves codex running");
   await attachCodexWrapped(box, sessionName, reattachRef2(box), void 0, openIn);
 }
 var codexAttachCommand = new Command5("attach").description(
@@ -3977,7 +4028,7 @@ var codexAttachCommand = new Command5("attach").description(
     await startOrAttachCodex(box, [], { ...opts, syncConfig: false });
   } catch (err) {
     if (err instanceof CodexSessionError) {
-      log12.error(err.message);
+      log11.error(err.message);
       process.exit(1);
     }
     handleLifecycleError(err);
@@ -4009,7 +4060,7 @@ var codexStartCommand = new Command5("start").description(
     let effectiveCodexArgs = shifted && idOrName ? [idOrName, ...codexArgs] : codexArgs;
     let resumeMode = null;
     if (opts.continue === true && opts.resume) {
-      log12.error("only one of -c / --continue / --resume can be passed");
+      log11.error("only one of -c / --continue / --resume can be passed");
       process.exit(2);
     }
     if (opts.continue === true) resumeMode = { kind: "continue" };
@@ -4024,7 +4075,7 @@ var codexStartCommand = new Command5("start").description(
         });
       } catch (err) {
         if (err instanceof TeleportError) {
-          log12.error(err.message);
+          log11.error(err.message);
           process.exit(2);
         }
         throw err;
@@ -4032,7 +4083,7 @@ var codexStartCommand = new Command5("start").description(
     }
     if ((box.provider ?? "docker") !== "docker") {
       if (opts.attach === false) {
-        outro3(
+        outro2(
           `--no-attach: cloud agent sessions are started lazily on attach. Run: agentbox codex attach ${reattachRef2(box)}`
         );
         return;
@@ -4051,7 +4102,7 @@ var codexStartCommand = new Command5("start").description(
           effectiveCodexArgs = [...resumePrepared.forwardArgs, ...effectiveCodexArgs];
         } catch (err) {
           if (err instanceof TeleportError) {
-            log12.error(err.message);
+            log11.error(err.message);
             process.exit(2);
           }
           throw err;
@@ -4070,7 +4121,7 @@ var codexStartCommand = new Command5("start").description(
     await startOrAttachCodex(box, effectiveCodexArgs, opts, resumePrepared);
   } catch (err) {
     if (err instanceof CodexSessionError) {
-      log12.error(err.message);
+      log11.error(err.message);
       process.exit(1);
     }
     handleLifecycleError(err);
@@ -4084,7 +4135,7 @@ var codexLoginCommand = new Command5("login").description(
 ).action(async (args) => {
   intro2("Signing in to Codex...");
   if (!process.stdin.isTTY) {
-    log12.error("`agentbox codex login` needs an interactive terminal.");
+    log11.error("`agentbox codex login` needs an interactive terminal.");
     process.exit(1);
   }
   try {
@@ -4098,10 +4149,10 @@ var codexLoginCommand = new Command5("login").description(
     s.stop("image ready");
     const exitCode = await runCodexLoginContainer(image, args);
     if (exitCode !== 0) {
-      log12.warn(`\`codex login\` exited with code ${String(exitCode)}`);
+      log11.warn(`\`codex login\` exited with code ${String(exitCode)}`);
       process.exit(exitCode);
     }
-    outro3("signed in \u2014 credentials saved for future boxes");
+    outro2("signed in \u2014 credentials saved for future boxes");
   } catch (err) {
     handleLifecycleError(err);
   }
@@ -4112,9 +4163,9 @@ codexCommand.addCommand(codexLoginCommand);
 
 // src/commands/opencode.ts
 import { access as access2 } from "fs/promises";
-import { homedir as homedir9 } from "os";
+import { homedir as homedir10 } from "os";
 import { join as join11 } from "path";
-import { confirm as confirm6, intro as intro3, isCancel as isCancel7, log as log13, outro as outro4, spinner as spinner5 } from "@clack/prompts";
+import { confirm as confirm6, intro as intro3, isCancel as isCancel7, log as log12, outro as outro3, spinner as spinner5 } from "@clack/prompts";
 import { Command as Command6 } from "commander";
 function reattachRef3(r) {
   return typeof r.projectIndex === "number" ? String(r.projectIndex) : r.name;
@@ -4188,7 +4239,7 @@ async function maybeRunOpencodeLogin(args) {
     initialValue: true
   });
   if (isCancel7(answer) || !answer) {
-    log13.info("Skipped sign-in \u2014 opencode will prompt you to sign in inside the box.");
+    log12.info("Skipped sign-in \u2014 opencode will prompt you to sign in inside the box.");
     return;
   }
   const s = spinner5();
@@ -4202,16 +4253,16 @@ async function maybeRunOpencodeLogin(args) {
   s.stop("image ready");
   const exitCode = await runOpencodeLoginContainer(args.image, []);
   if (exitCode !== 0) {
-    log13.warn("OpenCode login did not complete; continuing \u2014 run `agentbox opencode login` to retry.");
+    log12.warn("OpenCode login did not complete; continuing \u2014 run `agentbox opencode login` to retry.");
     return;
   }
-  log13.success("Signed in to OpenCode \u2014 saved for future boxes.");
+  log12.success("Signed in to OpenCode \u2014 saved for future boxes.");
 }
 async function cloudOpencodeCredAvailable(env = process.env) {
   for (const k of OPENCODE_FORWARDED_ENV_KEYS) {
     if ((env[k] ?? "").length > 0) return true;
   }
-  for (const p of [OPENCODE_CREDENTIALS_BACKUP_FILE, join11(homedir9(), ".local", "share", "opencode", "auth.json")]) {
+  for (const p of [OPENCODE_CREDENTIALS_BACKUP_FILE, join11(homedir10(), ".local", "share", "opencode", "auth.json")]) {
     try {
       await access2(p);
       return true;
@@ -4228,7 +4279,7 @@ async function maybeRunCloudOpencodeLogin(args) {
     initialValue: true
   });
   if (isCancel7(answer) || !answer) {
-    log13.info("Skipped sign-in \u2014 opencode will prompt you to sign in inside the box.");
+    log12.info("Skipped sign-in \u2014 opencode will prompt you to sign in inside the box.");
     return;
   }
   const s = spinner5();
@@ -4242,12 +4293,12 @@ async function maybeRunCloudOpencodeLogin(args) {
   s.stop("image ready");
   const exitCode = await runOpencodeLoginContainer(args.image, []);
   if (exitCode !== 0) {
-    log13.warn("OpenCode login did not complete; continuing \u2014 run `agentbox opencode login` to retry.");
+    log12.warn("OpenCode login did not complete; continuing \u2014 run `agentbox opencode login` to retry.");
     return;
   }
   const { copied } = await extractOpencodeCredentials(SHARED_OPENCODE_VOLUME, args.image);
-  if (copied) log13.success("Signed in to OpenCode \u2014 saved for future boxes.");
-  else log13.warn("OpenCode login finished but no auth.json was captured \u2014 sign in inside the box if needed.");
+  if (copied) log12.success("Signed in to OpenCode \u2014 saved for future boxes.");
+  else log12.warn("OpenCode login finished but no auth.json was captured \u2014 sign in inside the box if needed.");
 }
 var opencodeCommand = new Command6("opencode").description("Create a sandboxed box and launch OpenCode in a detachable tmux session").option("-w, --workspace <path>", "host workspace to mount", process.cwd()).option("-n, --name <name>", "friendly box name (default: <workspace-basename>-<id>)").option("--host-snapshot", "APFS-clone the host workspace into a per-box scratch dir before seeding /workspace (stabilizes the tar-pipe source)").option("--no-host-snapshot", "tar-pipe directly from the live host workspace at create time").option(
   "--snapshot <ref>",
@@ -4315,7 +4366,7 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
       });
     } catch (err) {
       if (err instanceof TeleportError) {
-        log13.error(err.message);
+        log12.error(err.message);
         cmdLog.close();
         process.exit(2);
       }
@@ -4332,7 +4383,7 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
   const checkpointRef = opts.snapshot && opts.snapshot.length > 0 ? opts.snapshot : providerDefault.length > 0 ? providerDefault : void 0;
   if (opts.initialPrompt && opts.initialPrompt.length > 0) {
     if (isCloud) {
-      log13.error("-i / --initial-prompt is currently docker-only (cloud sessions only start on attach).");
+      log12.error("-i / --initial-prompt is currently docker-only (cloud sessions only start on attach).");
       cmdLog.close();
       process.exit(2);
     }
@@ -4343,7 +4394,7 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
       });
     } catch (err) {
       if (err instanceof MissingAgentCredsError) {
-        log13.error(err.message);
+        log12.error(err.message);
         cmdLog.close();
         process.exit(2);
       }
@@ -4361,7 +4412,7 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
       maxRunningOverride,
       maxWorkingOverride
     });
-    outro4(
+    outro3(
       `job ${result.job.id} queued (${String(result.runningCount)}/${String(result.maxConcurrent)} running); log: ${result.job.logPath}`
     );
     cmdLog.close();
@@ -4377,13 +4428,13 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
       onLog: (line) => cmdLog.write(line)
     });
     if (gate.decision === "cancel") {
-      log13.warn("carry: cancelled \u2014 not creating the box");
+      log12.warn("carry: cancelled \u2014 not creating the box");
       cmdLog.close();
       process.exit(0);
     }
     if (gate.decision === "approve") carryEntries = gate.entries;
   } catch (err) {
-    log13.error(err instanceof Error ? err.message : String(err));
+    log12.error(err instanceof Error ? err.message : String(err));
     cmdLog.close();
     process.exit(1);
   }
@@ -4400,7 +4451,7 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
     }));
   } catch (err) {
     if (err instanceof FromBranchError || err instanceof UseBranchError) {
-      log13.error(err.message);
+      log12.error(err.message);
       cmdLog.close();
       process.exit(2);
     }
@@ -4489,14 +4540,20 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
       sessionName
     });
     const nSuffix = typeof result.record.projectIndex === "number" ? `  \xB7  n ${String(result.record.projectIndex)}` : "";
-    s.stop(`box ${result.record.container} ready${nSuffix}`);
+    s.stop(`box ready${nSuffix}`);
+    await printLaunchRecap({
+      record: result.record,
+      mode: "opencode",
+      reattach: reattachRef3(result.record),
+      workspacePath: opts.workspace,
+      fromBranch,
+      useBranch,
+      checkpointRef,
+      attaching: opts.attach !== false
+    });
     if (opts.attach === false) {
-      outro4(
-        `session started \u2014 attach with: agentbox opencode attach ${reattachRef3(result.record)}`
-      );
       return;
     }
-    outro4("attaching \u2014 Control+a d to detach, leaves opencode running");
     await attachOpencodeWrapped(
       result.record,
       sessionName,
@@ -4508,10 +4565,10 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
     s.stop("failed");
     cmdLog.write(`FAIL: ${err instanceof Error ? err.stack ?? err.message : String(err)}`);
     if (err instanceof OpencodeSessionError) {
-      log13.error(err.message);
+      log12.error(err.message);
       if (containerName) {
-        log13.info(`The box ${containerName} is still running. Destroy it with:`);
-        log13.info(`  agentbox destroy ${containerName} -y`);
+        log12.info(`The box ${containerName} is still running. Destroy it with:`);
+        log12.info(`  agentbox destroy ${containerName} -y`);
       }
       cmdLog.close();
       process.exit(1);
@@ -4537,12 +4594,12 @@ async function startOrAttachOpencode(box, opencodeArgs, opts) {
   const existing = await opencodeSessionInfo(box.container, sessionName);
   if (existing.running) {
     if (!wantAttach) {
-      outro4(
+      outro3(
         `session "${sessionName}" already running \u2014 attach with: agentbox opencode attach ${reattachRef3(box)}`
       );
       return;
     }
-    outro4(`session "${sessionName}" already running \u2014 attaching (Control+a d to detach)`);
+    outro3(`session "${sessionName}" already running \u2014 attaching (Control+a d to detach)`);
     await attachOpencodeWrapped(box, sessionName, reattachRef3(box), void 0, openIn);
     return;
   }
@@ -4572,12 +4629,12 @@ async function startOrAttachOpencode(box, opencodeArgs, opts) {
   await startOpencodeSession({ container: box.container, opencodeArgs, sessionName });
   s.stop(`box ${box.container} ready`);
   if (!wantAttach) {
-    outro4(
+    outro3(
       `session "${sessionName}" started \u2014 attach with: agentbox opencode attach ${reattachRef3(box)}`
     );
     return;
   }
-  outro4("attaching \u2014 Control+a d to detach, leaves opencode running");
+  outro3("attaching \u2014 Control+a d to detach, leaves opencode running");
   await attachOpencodeWrapped(box, sessionName, reattachRef3(box), void 0, openIn);
 }
 var opencodeAttachCommand = new Command6("attach").description(
@@ -4607,7 +4664,7 @@ var opencodeAttachCommand = new Command6("attach").description(
     await startOrAttachOpencode(box, [], { ...opts, syncConfig: false });
   } catch (err) {
     if (err instanceof OpencodeSessionError) {
-      log13.error(err.message);
+      log12.error(err.message);
       process.exit(1);
     }
     handleLifecycleError(err);
@@ -4646,7 +4703,7 @@ var opencodeStartCommand = new Command6("start").description(
         });
       } catch (err) {
         if (err instanceof TeleportError) {
-          log13.error(err.message);
+          log12.error(err.message);
           process.exit(2);
         }
         throw err;
@@ -4654,7 +4711,7 @@ var opencodeStartCommand = new Command6("start").description(
     }
     if ((box.provider ?? "docker") !== "docker") {
       if (opts.attach === false) {
-        outro4(
+        outro3(
           `--no-attach: cloud agent sessions are started lazily on attach. Run: agentbox opencode attach ${reattachRef3(box)}`
         );
         return;
@@ -4675,7 +4732,7 @@ var opencodeStartCommand = new Command6("start").description(
     await startOrAttachOpencode(box, effectiveOpencodeArgs, opts);
   } catch (err) {
     if (err instanceof OpencodeSessionError) {
-      log13.error(err.message);
+      log12.error(err.message);
       process.exit(1);
     }
     handleLifecycleError(err);
@@ -4689,7 +4746,7 @@ var opencodeLoginCommand = new Command6("login").description(
 ).action(async (args) => {
   intro3("Signing in to OpenCode...");
   if (!process.stdin.isTTY) {
-    log13.error("`agentbox opencode login` needs an interactive terminal.");
+    log12.error("`agentbox opencode login` needs an interactive terminal.");
     process.exit(1);
   }
   try {
@@ -4703,10 +4760,10 @@ var opencodeLoginCommand = new Command6("login").description(
     s.stop("image ready");
     const exitCode = await runOpencodeLoginContainer(image, args);
     if (exitCode !== 0) {
-      log13.warn(`\`opencode auth login\` exited with code ${String(exitCode)}`);
+      log12.warn(`\`opencode auth login\` exited with code ${String(exitCode)}`);
       process.exit(exitCode);
     }
-    outro4("signed in \u2014 credentials saved for future boxes");
+    outro3("signed in \u2014 credentials saved for future boxes");
   } catch (err) {
     handleLifecycleError(err);
   }
@@ -4982,7 +5039,7 @@ function handleError(err) {
 var configCommand = new Command7("config").description("Read / write layered config (global, per-project, workspace `defaults:` block)").addCommand(getCommand).addCommand(setCommand).addCommand(unsetCommand).addCommand(listCommand).addCommand(pathCommand).addCommand(editCommand).addCommand(listProjectsCommand);
 
 // src/commands/cp.ts
-import { log as log14 } from "@clack/prompts";
+import { log as log13 } from "@clack/prompts";
 import { Command as Command8 } from "commander";
 function parseBoxArg(arg) {
   const idx = arg.indexOf(":");
@@ -5065,10 +5122,10 @@ var cpCommand = new Command8("cp").description("Copy files between host and box
     }
     const insp = await inspectBox(box.id);
     if (insp.state === "paused") {
-      log14.info("box is paused; unpausing");
+      log13.info("box is paused; unpausing");
       await unpauseBox(box.id);
     } else if (insp.state === "stopped") {
-      log14.info("box is stopped; starting");
+      log13.info("box is stopped; starting");
       await startBox(box.id);
     } else if (insp.state === "missing") {
       throw new Error(`box ${box.name} has no container; was it destroyed?`);
@@ -5076,7 +5133,7 @@ var cpCommand = new Command8("cp").description("Copy files between host and box
     if (parsed.direction === "upload") {
       const result = await uploadToBox(box, parsed.hostPath, parsed.boxPath);
       if (result.warn) {
-        log14.warn(`copied to ${box.name}:${result.finalPath}, but ${result.warn}`);
+        log13.warn(`copied to ${box.name}:${result.finalPath}, but ${result.warn}`);
       } else {
         process.stdout.write(`copied to ${box.name}:${result.finalPath}
 `);
@@ -5092,7 +5149,7 @@ var cpCommand = new Command8("cp").description("Copy files between host and box
 });
 
 // src/commands/create.ts
-import { intro as intro4, log as log15, outro as outro5 } from "@clack/prompts";
+import { intro as intro4, log as log14, outro as outro4 } from "@clack/prompts";
 import { Command as Command9 } from "commander";
 import { execSync, spawnSync as spawnSync2 } from "child_process";
 function buildCliOverrides(opts) {
@@ -5139,7 +5196,10 @@ async function attachShell(record) {
 var createCommand = new Command9("create").description("Create and start a new agent box (Docker container with /workspace seeded via in-container git worktree)").option("-w, --workspace <path>", "host workspace to mount", process.cwd()).option("-n, --name <name>", "friendly box name (default: <workspace-basename>-<id>)").option("--provider <name>", "sandbox backend: 'docker' (default) or 'daytona' (cloud)").option("--host-snapshot", "APFS-clone the host workspace into a per-box scratch dir before seeding /workspace (stabilizes the tar-pipe source)").option("--no-host-snapshot", "bind the live workspace directly (host edits leak into reads)").option(
   "--snapshot <ref>",
   "start from a project checkpoint (see `agentbox checkpoint`); overrides box.defaultCheckpoint"
-).option("--image <ref>", "override the box image", void 0).option("--attach", "drop into a shell inside the box after it is ready").option("--with-playwright", "also install @playwright/cli@latest globally inside the box").option(
+).option("--image <ref>", "override the box image", void 0).option(
+  "--build",
+  "build the docker base image locally instead of pulling the prebuilt one from the registry"
+).option("--attach", "drop into a shell inside the box after it is ready").option("--with-playwright", "also install @playwright/cli@latest globally inside the box").option(
   "--with-env",
   "copy host env/config files (.env*, secrets.toml, agentbox.yaml, ...) into /workspace at create time (gitignore-bypassing)"
 ).option("--no-vnc", "disable the per-box Xvnc + noVNC web client (on by default)").option(
@@ -5212,13 +5272,13 @@ var createCommand = new Command9("create").description("Create and start a new a
       onLog: (line) => cmdLog.write(line)
     });
     if (gate.decision === "cancel") {
-      log15.warn("carry: cancelled \u2014 not creating the box");
+      log14.warn("carry: cancelled \u2014 not creating the box");
       cmdLog.close();
       process.exit(0);
     }
     if (gate.decision === "approve") carryEntries = gate.entries;
   } catch (err) {
-    log15.error(err instanceof Error ? err.message : String(err));
+    log14.error(err instanceof Error ? err.message : String(err));
     cmdLog.close();
     process.exit(1);
   }
@@ -5266,7 +5326,7 @@ var createCommand = new Command9("create").description("Create and start a new a
     } catch (err) {
       if (err instanceof FromBranchError || err instanceof UseBranchError) {
         s.stop("aborting: invalid branch selection");
-        log15.error(err.message);
+        log14.error(err.message);
         cmdLog.close();
         process.exit(2);
       }
@@ -5277,6 +5337,8 @@ var createCommand = new Command9("create").description("Create and start a new a
       name: opts.name,
       checkpointRef,
       image: cfg.effective.box.image,
+      allowPull: opts.build ? false : void 0,
+      imageRegistry: cfg.effective.box.imageRegistry,
       withPlaywright,
       withEnv: cfg.effective.box.withEnv,
       envFilesToImport: wiz.envFilesToImport,
@@ -5306,17 +5368,17 @@ var createCommand = new Command9("create").description("Create and start a new a
       }
     });
     s.stop(`box ${result.record.container} ready`);
-    log15.info(`id:        ${result.record.id}`);
+    log14.info(`id:        ${result.record.id}`);
     if (typeof result.record.projectIndex === "number") {
-      log15.info(`n:         ${String(result.record.projectIndex)}   (in ${projectRoot})`);
+      log14.info(`n:         ${String(result.record.projectIndex)}   (in ${projectRoot})`);
     }
-    log15.info(`container: ${result.record.container}`);
-    log15.info(`image:     ${result.record.image}${result.imageBuilt ? " (built just now)" : ""}`);
+    log14.info(`container: ${result.record.container}`);
+    log14.info(`image:     ${result.record.image}${result.imageBuilt ? " (built just now)" : ""}`);
     if (result.record.snapshotDir) {
-      log15.info(`snapshot:  ${result.record.snapshotDir}`);
+      log14.info(`snapshot:  ${result.record.snapshotDir}`);
     }
     if (result.record.checkpointSource) {
-      log15.info(
+      log14.info(
         `checkpoint: ${result.record.checkpointSource.ref} (${result.record.checkpointSource.type}) \u2192 ${result.record.checkpointImage ?? "(missing)"}`
       );
     }
@@ -5328,7 +5390,7 @@ var createCommand = new Command9("create").description("Create and start a new a
       `  agentbox claude attach ${result.record.name}`,
       `  agentbox url ${result.record.name}`
     ];
-    log15.message(
+    log14.message(
       [
         "",
         "Try it:",
@@ -5347,7 +5409,7 @@ var createCommand = new Command9("create").description("Create and start a new a
           const protectedPaths = boxes.map((b) => b.projectRoot).filter((p) => typeof p === "string");
           const res = await pruneOrphanProjectConfigs({ protectedPaths });
           if (res.removed.length > 0) {
-            log15.info(
+            log14.info(
               `cleaned ${String(res.removed.length)} orphan project config dir(s): ` + res.removed.map((r) => r.originalPath).join(", ")
             );
           }
@@ -5355,9 +5417,9 @@ var createCommand = new Command9("create").description("Create and start a new a
       } catch {
       }
     }
-    outro5("done");
+    outro4("done");
     if (attachClaudeAfter) {
-      const { cloudAgentAttach: cloudAgentAttach2 } = await import("./_cloud-attach-O6NYTLES.js");
+      const { cloudAgentAttach: cloudAgentAttach2 } = await import("./_cloud-attach-6C5NMOHD.js");
       await cloudAgentAttach2({
         box: result.record,
         binary: "claude",
@@ -5373,14 +5435,14 @@ var createCommand = new Command9("create").description("Create and start a new a
     s.stop("failed");
     const msg = err instanceof Error ? err.message : String(err);
     cmdLog.write(`FAIL: ${err instanceof Error ? err.stack ?? err.message : String(err)}`);
-    log15.error(msg);
+    log14.error(msg);
     try {
       const running = execSync('docker ps --format "{{.Names}}"', {
         stdio: ["ignore", "pipe", "ignore"]
       }).toString().split("\n").filter((n) => n.startsWith("agentbox-"));
       if (running.length > 0) {
-        log15.warn(`leftover containers: ${running.join(", ")}`);
-        log15.warn(`remove with: docker rm -f ${running.join(" ")}`);
+        log14.warn(`leftover containers: ${running.join(", ")}`);
+        log14.warn(`remove with: docker rm -f ${running.join(" ")}`);
       }
     } catch {
     }
@@ -5393,7 +5455,7 @@ var createCommand = new Command9("create").description("Create and start a new a
 
 // src/commands/dashboard.ts
 import { spawn as spawn2 } from "child_process";
-import { log as log16 } from "@clack/prompts";
+import { log as log15 } from "@clack/prompts";
 import { Command as Command10 } from "commander";
 
 // src/dashboard/layout.ts
@@ -6917,7 +6979,7 @@ function toSidebar(b) {
 var dashboardCommand = new Command10("dashboard").description("Box list + the selected box live Agent session").argument("[box]", "initial box (default: first running box; -p restricts to the cwd project)").option("-p, --project", "only this project's boxes (default: all boxes globally)").action(async (idOrName, opts) => {
   try {
     if (!process.stdout.isTTY || !process.stdin.isTTY) {
-      log16.error("agentbox dashboard needs an interactive terminal");
+      log15.error("agentbox dashboard needs an interactive terminal");
       process.exit(2);
     }
     const backend = await loadPtyBackend();
@@ -6927,10 +6989,10 @@ var dashboardCommand = new Command10("dashboard").description("Box list + the se
       ptySpawn = backend.ptySpawn;
       termCtor = backend.termCtor;
     } else {
-      log16.error(
+      log15.error(
         "agentbox dashboard is unavailable here (native terminal backend failed to load)"
       );
-      log16.info("use `agentbox claude` / `agentbox claude attach` instead");
+      log15.info("use `agentbox claude` / `agentbox claude attach` instead");
       process.exit(2);
     }
     const project = await findProjectRoot(process.cwd());
@@ -7242,9 +7304,9 @@ var dashboardCommand = new Command10("dashboard").description("Box list + the se
         if (!br.up) return `VNC: in-box browser unavailable (${br.reason ?? "box not running?"})`;
       } catch {
       }
-      detach("open", [url]);
+      detach(hostOpenCommand(), [url]);
       if (exposedWebUrl) {
-        detach("open", [exposedWebUrl]);
+        detach(hostOpenCommand(), [exposedWebUrl]);
         return "Opening VNC + web in browser\u2026";
       }
       return "Opening VNC in browser\u2026";
@@ -7253,7 +7315,7 @@ var dashboardCommand = new Command10("dashboard").description("Box list + the se
       const box = (await listBoxes()).find((b) => b.id === boxId);
       if (!box) return "box not found";
       const { url } = webTarget(box);
-      detach("open", [url]);
+      detach(hostOpenCommand(), [url]);
       return `Opening ${url.replace(/^https?:\/\//, "")}\u2026`;
     };
     const openCode = async (boxId) => {
@@ -7335,11 +7397,11 @@ var dashboardCommand = new Command10("dashboard").description("Box list + the se
 });
 
 // ../../packages/sandbox-daytona/dist/cli.js
-import { log as log17, spinner as spinner6 } from "@clack/prompts";
+import { log as log16, spinner as spinner6 } from "@clack/prompts";
 import { Command as Command11 } from "commander";
 function reportError(err) {
   const message = err instanceof Error ? err.message : String(err);
-  log17.error(message);
+  log16.error(message);
   process.exitCode = 1;
 }
 var loginSub = new Command11("login").description("Set up (or rotate) Daytona credentials for cloud boxes").option("--status", "show what is currently configured (masked) and exit").action(async (opts) => {
@@ -7398,7 +7460,7 @@ var resyncSub = new Command11("resync").description(
     const sb = spinner6();
     sb.start(`provisioning throwaway sandbox to refresh: ${agents.join(", ")}`);
     const ensured = await ensureAgentVolumesForCloud(daytonaBackend, {
-      onLog: (line) => log17.info(line)
+      onLog: (line) => log16.info(line)
     });
     if (ensured.agents.length === 0) {
       sb.stop("no agent volumes available \u2014 the daytona backend has no volume primitive");
@@ -7438,7 +7500,7 @@ var resyncSub = new Command11("resync").description(
       }
       sb3.stop("throwaway sandbox destroyed");
     }
-    log17.success(
+    log16.success(
       `Daytona agent volumes refreshed: ${agents.join(", ")}. Next \`agentbox create --provider daytona\` will use the updated credentials.`
     );
   } catch (err) {
@@ -7458,11 +7520,11 @@ var dockerCommand = new Command12("docker").description(
 });
 
 // ../../packages/sandbox-hetzner/dist/cli.js
-import { log as log18 } from "@clack/prompts";
+import { log as log17 } from "@clack/prompts";
 import { Command as Command13 } from "commander";
 function reportError2(err) {
   const message = err instanceof Error ? err.message : String(err);
-  log18.error(message);
+  log17.error(message);
   process.exitCode = 1;
 }
 var loginSub2 = new Command13("login").description("Set up (or rotate) Hetzner Cloud credentials for VPS boxes").option("--status", "show what is currently configured (masked) and exit").action(async (opts) => {
@@ -7606,11 +7668,11 @@ var hetznerCommand = new Command13("hetzner").description(
 ).addCommand(loginSub2, { isDefault: true }).addCommand(firewallSub);
 
 // ../../packages/sandbox-vercel/dist/cli.js
-import { log as log19 } from "@clack/prompts";
+import { log as log18 } from "@clack/prompts";
 import { Command as Command14 } from "commander";
 function reportError3(err) {
   const message = err instanceof Error ? err.message : String(err);
-  log19.error(message);
+  log18.error(message);
   process.exitCode = 1;
 }
 function relativeExpiry(expiresAt) {
@@ -7681,7 +7743,7 @@ var vercelCommand = new Command14("vercel").description(
 ).addCommand(loginSub3, { isDefault: true });
 
 // src/commands/destroy.ts
-import { confirm as confirm7, isCancel as isCancel8, log as log20 } from "@clack/prompts";
+import { confirm as confirm7, isCancel as isCancel8, log as log19 } from "@clack/prompts";
 import { Command as Command15 } from "commander";
 var destroyCommand = new Command15("destroy").alias("rm").description("Destroy a box and discard its container writable layer (where /workspace lived)").argument(
   "[box]",
@@ -7690,7 +7752,7 @@ var destroyCommand = new Command15("destroy").alias("rm").description("Destroy a
   try {
     const box = await resolveBoxOrExit(idOrName);
     if (!opts.yes) {
-      log20.warn("Will also wipe the box volume and agent work-in-progress");
+      log19.warn("Will also wipe the box volume and agent work-in-progress");
       const rootBranch = box.gitWorktrees?.find((w) => w.kind === "root")?.branch;
       const lines = [box.name];
       if (rootBranch) lines.push(`branch:    ${rootBranch}`);
@@ -7698,13 +7760,13 @@ var destroyCommand = new Command15("destroy").alias("rm").description("Destroy a
       if (box.snapshotDir) {
         lines.push(`snapshot:  ${box.snapshotDir}${opts.keepSnapshot ? " (will be kept)" : ""}`);
       }
-      log20.info(lines.join("\n"));
+      log19.info(lines.join("\n"));
       const ok = await confirm7({
         message: "Destroy this box?",
         initialValue: false
       });
       if (isCancel8(ok) || !ok) {
-        log20.info("cancelled");
+        log19.info("cancelled");
         return;
       }
     }
@@ -7737,11 +7799,11 @@ var destroyCommand = new Command15("destroy").alias("rm").description("Destroy a
 });
 
 // src/commands/download.ts
-import { confirm as confirm13, isCancel as isCancel14, log as log26 } from "@clack/prompts";
+import { confirm as confirm13, isCancel as isCancel14, log as log25 } from "@clack/prompts";
 import { Command as Command21 } from "commander";
 
 // src/commands/download-claude.ts
-import { confirm as confirm8, isCancel as isCancel9, log as log21 } from "@clack/prompts";
+import { confirm as confirm8, isCancel as isCancel9, log as log20 } from "@clack/prompts";
 import { Command as Command16 } from "commander";
 function tag(item) {
   const noun = item.category === "plugins" ? "plugin" : item.category.replace(/s$/, "");
@@ -7757,7 +7819,7 @@ var downloadClaudeCommand = new Command16("claude").description(
     const box = await resolveBoxOrExit(idOrName);
     const volume = box.claudeConfigVolume ?? resolveClaudeVolume({ isolate: false, boxId: box.id }).volume;
     if (volume === SHARED_CLAUDE_VOLUME) {
-      log21.warn(
+      log20.warn(
         `Reading the shared ${SHARED_CLAUDE_VOLUME} volume \u2014 it aggregates Claude extensions installed in ANY box, not just ${box.name}.`
       );
     }
@@ -7787,7 +7849,7 @@ var downloadClaudeCommand = new Command16("claude").description(
         initialValue: false
       });
       if (isCancel9(ok) || !ok) {
-        log21.info("cancelled");
+        log20.info("cancelled");
         return;
       }
     }
@@ -7802,7 +7864,7 @@ var downloadClaudeCommand = new Command16("claude").description(
 });
 
 // src/commands/download-codex.ts
-import { confirm as confirm9, isCancel as isCancel10, log as log22 } from "@clack/prompts";
+import { confirm as confirm9, isCancel as isCancel10, log as log21 } from "@clack/prompts";
 import { Command as Command17 } from "commander";
 var downloadCodexCommand = new Command17("codex").description(
   "Download box-side Codex config/auth (config.toml, auth.json, prompts) back to host ~/.codex (additive)"
@@ -7814,7 +7876,7 @@ var downloadCodexCommand = new Command17("codex").description(
     const box = await resolveBoxOrExit(idOrName);
     const volume = box.codexConfigVolume ?? resolveCodexVolume({ isolate: false, boxId: box.id }).volume;
     if (volume === SHARED_CODEX_VOLUME) {
-      log22.warn(
+      log21.warn(
         `Reading the shared ${SHARED_CODEX_VOLUME} volume \u2014 it aggregates Codex config from ANY box, not just ${box.name}.`
       );
     }
@@ -7840,7 +7902,7 @@ var downloadCodexCommand = new Command17("codex").description(
         initialValue: false
       });
       if (isCancel10(ok) || !ok) {
-        log22.info("cancelled");
+        log21.info("cancelled");
         return;
       }
     }
@@ -7853,7 +7915,7 @@ var downloadCodexCommand = new Command17("codex").description(
 });
 
 // src/commands/download-opencode.ts
-import { confirm as confirm10, isCancel as isCancel11, log as log23 } from "@clack/prompts";
+import { confirm as confirm10, isCancel as isCancel11, log as log22 } from "@clack/prompts";
 import { Command as Command18 } from "commander";
 var downloadOpencodeCommand = new Command18("opencode").description(
   "Download box-side OpenCode config/auth (auth.json, opencode.json, agents, commands, themes) back to host ~/.config + ~/.local/share opencode (additive)"
@@ -7865,7 +7927,7 @@ var downloadOpencodeCommand = new Command18("opencode").description(
     const box = await resolveBoxOrExit(idOrName);
     const volume = box.opencodeConfigVolume ?? resolveOpencodeVolume({ isolate: false, boxId: box.id }).volume;
     if (volume === SHARED_OPENCODE_VOLUME) {
-      log23.warn(
+      log22.warn(
         `Reading the shared ${SHARED_OPENCODE_VOLUME} volume \u2014 it aggregates OpenCode config from ANY box, not just ${box.name}.`
       );
     }
@@ -7891,7 +7953,7 @@ var downloadOpencodeCommand = new Command18("opencode").description(
         initialValue: false
       });
       if (isCancel11(ok) || !ok) {
-        log23.info("cancelled");
+        log22.info("cancelled");
         return;
       }
     }
@@ -7904,7 +7966,7 @@ var downloadOpencodeCommand = new Command18("opencode").description(
 });
 
 // src/commands/download-config.ts
-import { confirm as confirm11, isCancel as isCancel12, log as log24 } from "@clack/prompts";
+import { confirm as confirm11, isCancel as isCancel12, log as log23 } from "@clack/prompts";
 import { Command as Command19 } from "commander";
 function tagChange(line) {
   const sp = line.indexOf(" ");
@@ -7922,15 +7984,15 @@ var downloadConfigCommand = new Command19("config").description("Download agentb
     const box = await resolveBoxOrExit(idOrName);
     const insp = await inspectBox(box.id);
     if (insp.state === "paused") {
-      log24.info("box is paused; unpausing");
+      log23.info("box is paused; unpausing");
       await unpauseBox(box.id);
     } else if (insp.state === "stopped") {
-      log24.info("box is stopped; starting");
+      log23.info("box is stopped; starting");
       await startBox(box.id);
     } else if (insp.state === "missing") {
       throw new Error(`box ${box.name} has no container; was it destroyed?`);
     }
-    log24.info(`agentbox.yaml bypasses gitignore and copies directly into ${box.workspacePath}`);
+    log23.info(`agentbox.yaml bypasses gitignore and copies directly into ${box.workspacePath}`);
     const preview = await pullToHost(box, {
       dryRun: true,
       respectGitignore: false,
@@ -7958,7 +8020,7 @@ var downloadConfigCommand = new Command19("config").description("Download agentb
         initialValue: false
       });
       if (isCancel12(ok) || !ok) {
-        log24.info("cancelled");
+        log23.info("cancelled");
         return;
       }
     }
@@ -7980,7 +8042,7 @@ var downloadConfigCommand = new Command19("config").description("Download agentb
 });
 
 // src/commands/download-env.ts
-import { confirm as confirm12, isCancel as isCancel13, log as log25 } from "@clack/prompts";
+import { confirm as confirm12, isCancel as isCancel13, log as log24 } from "@clack/prompts";
 import { Command as Command20 } from "commander";
 function tagChange2(line) {
   const sp = line.indexOf(" ");
@@ -8004,15 +8066,15 @@ var downloadEnvCommand = new Command20("env").description(
     const box = await resolveBoxOrExit(idOrName);
     const insp = await inspectBox(box.id);
     if (insp.state === "paused") {
-      log25.info("box is paused; unpausing");
+      log24.info("box is paused; unpausing");
       await unpauseBox(box.id);
     } else if (insp.state === "stopped") {
-      log25.info("box is stopped; starting");
+      log24.info("box is stopped; starting");
       await startBox(box.id);
     } else if (insp.state === "missing") {
       throw new Error(`box ${box.name} has no container; was it destroyed?`);
     }
-    log25.info(
+    log24.info(
       `env/config files bypass gitignore and copy directly into ${box.workspacePath}`
     );
     const patterns = [...DEFAULT_ENV_PATTERNS, ...opts.pattern];
@@ -8043,7 +8105,7 @@ var downloadEnvCommand = new Command20("env").description(
         initialValue: false
       });
       if (isCancel13(ok) || !ok) {
-        log25.info("cancelled");
+        log24.info("cancelled");
         return;
       }
     }
@@ -8091,7 +8153,7 @@ var downloadCommand = new Command21("download").enablePositionalOptions().descri
         throw new Error("cloud download does not yet support --dry-run; omit to bulk-pull /workspace.");
       }
       if (!opts.respectGitignore || opts.includeNodeModules || opts.withEnv || opts.pattern.length > 0) {
-        log26.warn(
+        log25.warn(
           "cloud download ignores gitignore/--with-env/--pattern filters in v1 \u2014 pulling the whole /workspace tree (Phase 6 polish)."
         );
       }
@@ -8101,7 +8163,7 @@ var downloadCommand = new Command21("download").enablePositionalOptions().descri
           initialValue: false
         });
         if (isCancel14(ok) || !ok) {
-          log26.info("cancelled");
+          log25.info("cancelled");
           return;
         }
       }
@@ -8120,17 +8182,17 @@ var downloadCommand = new Command21("download").enablePositionalOptions().descri
     }
     const insp = await inspectBox(box.id);
     if (insp.state === "paused") {
-      log26.info("box is paused; unpausing");
+      log25.info("box is paused; unpausing");
       await unpauseBox(box.id);
     } else if (insp.state === "stopped") {
-      log26.info("box is stopped; starting");
+      log25.info("box is stopped; starting");
       await startBox(box.id);
     } else if (insp.state === "missing") {
       throw new Error(`box ${box.name} has no container; was it destroyed?`);
     }
     const rootWorktree = box.gitWorktrees?.find((w) => w.kind === "root");
     if (rootWorktree) {
-      log26.warn(
+      log25.warn(
         `This box has been committing to branch \`${rootWorktree.branch}\` in a separate worktree.
 For a git-aware merge instead of a file copy, run from your checkout:
   git merge ${rootWorktree.branch}
@@ -8166,7 +8228,7 @@ Continuing with rsync into ${box.workspacePath}`
         initialValue: false
       });
       if (isCancel14(ok) || !ok) {
-        log26.info("cancelled");
+        log25.info("cancelled");
         return;
       }
     }
@@ -8194,7 +8256,7 @@ downloadCommand.addCommand(downloadOpencodeCommand);
 downloadCommand.addCommand(downloadConfigCommand);
 
 // src/commands/drive.ts
-import { log as log27 } from "@clack/prompts";
+import { log as log26 } from "@clack/prompts";
 import { Command as Command22 } from "commander";
 
 // src/lib/drive/keys.ts
@@ -8480,7 +8542,7 @@ var driveWaitCommand = new Command22("wait").description("Block until --text app
         }) + "\n"
       );
     } else {
-      log27.error(`text not found within ${String(timeoutMs)}ms: ${opts.text}`);
+      log26.error(`text not found within ${String(timeoutMs)}ms: ${opts.text}`);
     }
     process.exit(1);
   } catch (err) {
@@ -8507,8 +8569,8 @@ driveCommand.addCommand(driveWaitCommand);
 driveCommand.addCommand(driveResizeCommand);
 function handleDriveError(err) {
   if (err instanceof SessionNotFoundError) {
-    log27.error(err.message);
-    log27.info("start an agent first (e.g. `agentbox claude <box>`) or pass --session.");
+    log26.error(err.message);
+    log26.info("start an agent first (e.g. `agentbox claude <box>`) or pass --session.");
     process.exit(2);
   }
   handleLifecycleError(err);
@@ -8532,10 +8594,10 @@ function sleep2(ms) {
 }
 
 // src/commands/fork.ts
-import { log as log28 } from "@clack/prompts";
+import { log as log27 } from "@clack/prompts";
 import { Command as Command23 } from "commander";
 import { existsSync as existsSync4, readdirSync, statSync } from "fs";
-import { homedir as homedir10 } from "os";
+import { homedir as homedir11 } from "os";
 import { join as join12 } from "path";
 var FORK_AGENTS = ["claude", "codex", "opencode"];
 var AGENT_COMMAND = {
@@ -8556,7 +8618,7 @@ function resolveSessionArgs(agent, opts) {
   }
   if (opts.session) return ["--resume", opts.session];
   if (agent === "codex") return ["--continue"];
-  const dir = join12(homedir10(), ".claude", "projects", encodeClaudeProjectsDir(opts.workspace));
+  const dir = join12(homedir11(), ".claude", "projects", encodeClaudeProjectsDir(opts.workspace));
   if (!existsSync4(dir)) return ["--continue"];
   const now = Date.now();
   const recent = readdirSync(dir).filter((f) => f.endsWith(".jsonl")).map((f) => {
@@ -8601,19 +8663,19 @@ var forkCommand = new Command23("fork").description(
   "auto-approve agentbox.yaml's carry: block (fork skips carry by default \u2014 it does not silently re-copy host files into the new box)"
 ).action(async (opts) => {
   if ((process.env.AGENTBOX_RELAY_URL ?? "").trim().length > 0) {
-    log28.error(
+    log27.error(
       "agentbox fork runs on the host only: it teleports a host agent session into a new box. You appear to be inside a box (AGENTBOX_RELAY_URL is set) \u2014 box\u2192box fork is not supported yet."
     );
     process.exit(2);
   }
   const agent = opts.agent?.trim() || "claude";
   if (!FORK_AGENTS.includes(agent)) {
-    log28.error(`--agent: expected one of ${FORK_AGENTS.join(", ")}, got "${opts.agent ?? ""}"`);
+    log27.error(`--agent: expected one of ${FORK_AGENTS.join(", ")}, got "${opts.agent ?? ""}"`);
     process.exit(2);
   }
   const attachIn = opts.attachIn ?? "tab";
   if (!FORK_ATTACH_VALUES.includes(attachIn)) {
-    log28.error(`--attach-in: expected one of ${FORK_ATTACH_VALUES.join(", ")}, got "${attachIn}"`);
+    log27.error(`--attach-in: expected one of ${FORK_ATTACH_VALUES.join(", ")}, got "${attachIn}"`);
     process.exit(2);
   }
   const provider = opts.provider?.trim();
@@ -8621,7 +8683,7 @@ var forkCommand = new Command23("fork").description(
   try {
     sessionArgs = resolveSessionArgs(agent, opts);
   } catch (err) {
-    log28.error(err instanceof Error ? err.message : String(err));
+    log27.error(err instanceof Error ? err.message : String(err));
     process.exit(2);
   }
   const subArgv = [
@@ -8639,16 +8701,16 @@ var forkCommand = new Command23("fork").description(
 });
 
 // src/commands/install.ts
-import { confirm as confirm14, intro as intro6, isCancel as isCancel15, log as log30, note, outro as outro6, select as select2, spinner as spinner8 } from "@clack/prompts";
+import { confirm as confirm14, intro as intro6, isCancel as isCancel15, log as log29, note as note2, outro as outro5, select as select2, spinner as spinner8 } from "@clack/prompts";
 import { Command as Command25 } from "commander";
 import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync, writeFileSync as writeFileSync4 } from "fs";
-import { homedir as homedir13 } from "os";
+import { homedir as homedir14 } from "os";
 import { dirname as dirname2, join as join15, resolve as resolve2 } from "path";
 import { fileURLToPath } from "url";
 
 // src/lib/doctor-checks.ts
 import { accessSync, constants as fsConstants, mkdirSync as mkdirSync3 } from "fs";
-import { homedir as homedir11 } from "os";
+import { homedir as homedir12 } from "os";
 import { join as join13 } from "path";
 import { execa as execa2 } from "execa";
 var ALL_PROVIDERS = ["docker", "daytona", "hetzner", "vercel"];
@@ -8688,10 +8750,16 @@ function checkNode() {
   };
 }
 function checkPlatform() {
-  return { label: "platform", status: "ok", detail: `${process.platform}/${process.arch}` };
+  const supported = process.platform === "darwin" || process.platform === "linux";
+  return {
+    label: "platform",
+    status: supported ? "ok" : "warn",
+    detail: `${process.platform}/${process.arch}`,
+    hint: supported ? void 0 : "agentbox supports macOS and Linux hosts; this OS is untested"
+  };
 }
 function checkAgentboxHome() {
-  const dir = join13(homedir11(), ".agentbox");
+  const dir = join13(homedir12(), ".agentbox");
   try {
     mkdirSync3(dir, { recursive: true });
     accessSync(dir, fsConstants.W_OK);
@@ -8728,6 +8796,7 @@ async function runSystemChecks() {
   return [checkNode(), checkPlatform(), checkAgentboxHome(), git, ssh];
 }
 async function dockerChecks() {
+  const linux = process.platform === "linux";
   const cli = await probeVersion("docker");
   if (!cli) {
     return [
@@ -8735,25 +8804,34 @@ async function dockerChecks() {
         label: "docker cli",
         status: "warn",
         detail: "not found",
-        hint: "install Docker Desktop, OrbStack, or docker engine"
+        hint: linux ? "install docker engine: https://docs.docker.com/engine/install/" : "install Docker Desktop, OrbStack, or docker engine"
       }
     ];
   }
   const cliRes = { label: "docker cli", status: "ok", detail: cli };
   const info = await execa2("docker", ["info"], { reject: false });
   if (info.exitCode !== 0) {
+    const permDenied = `${info.stderr ?? ""}`.toLowerCase().includes("permission denied");
+    let hint;
+    if (permDenied && linux) {
+      hint = "add your user to the docker group: `sudo usermod -aG docker $USER`, then log out/in (or run `newgrp docker`)";
+    } else if (linux) {
+      hint = "start Docker: `sudo systemctl start docker` (install docker engine if missing)";
+    } else {
+      hint = "start Docker (Desktop / OrbStack)";
+    }
     return [
       cliRes,
       {
         label: "docker daemon",
         status: "warn",
-        detail: "unreachable",
-        hint: "start Docker (Desktop / OrbStack / `systemctl start docker`)"
+        detail: permDenied ? "permission denied" : "unreachable",
+        hint
       }
     ];
   }
   const daemonRes = { label: "docker daemon", status: "ok", detail: "reachable" };
-  const mod = await import("./dist-BQNX7RQE.js");
+  const mod = await import("./dist-ZEGIMYWZ.js");
   let imgRes;
   try {
     const img = await mod.imageInfo(mod.DEFAULT_BOX_IMAGE);
@@ -8784,7 +8862,7 @@ async function dockerChecks() {
 }
 async function daytonaChecks() {
   try {
-    const mod = await import("./dist-TMHSUVTP.js");
+    const mod = await import("./dist-PJFJNXO2.js");
     const status = await mod.getDaytonaStatus();
     if (!status.configured) {
       return [
@@ -8820,7 +8898,7 @@ async function daytonaChecks() {
 }
 async function hetznerChecks() {
   try {
-    const mod = await import("./dist-5FQGYRW5.js");
+    const mod = await import("./dist-4SUIXKSD.js");
     const cred = mod.readHetznerCredStatus();
     const credRes = cred.source === "none" ? {
       label: "credentials",
@@ -8852,7 +8930,7 @@ async function hetznerChecks() {
 }
 async function vercelChecks() {
   try {
-    const mod = await import("./dist-PZW3GWWU.js");
+    const mod = await import("./dist-HT2YV6PB.js");
     const cred = mod.readVercelCredStatus();
     const credRes = cred.auth === "none" ? {
       label: "credentials",
@@ -8979,11 +9057,11 @@ function formatDetailed(groups) {
 
 // src/lib/first-run.ts
 import { existsSync as existsSync5, mkdirSync as mkdirSync4, writeFileSync as writeFileSync3 } from "fs";
-import { homedir as homedir12 } from "os";
+import { homedir as homedir13 } from "os";
 import { dirname, join as join14 } from "path";
 var MARKER_VERSION = 1;
 function setupMarkerPath() {
-  return join14(homedir12(), ".agentbox", "setup-complete.json");
+  return join14(homedir13(), ".agentbox", "setup-complete.json");
 }
 function isFirstRun() {
   return !existsSync5(setupMarkerPath());
@@ -9000,7 +9078,7 @@ function markSetupComplete(provider) {
 }
 
 // src/commands/prepare.ts
-import { intro as intro5, log as log29, spinner as spinner7 } from "@clack/prompts";
+import { intro as intro5, log as log28, spinner as spinner7 } from "@clack/prompts";
 import { Command as Command24 } from "commander";
 async function dockerStatus() {
   let img;
@@ -9063,7 +9141,7 @@ async function renderDocker(status) {
 }
 async function daytonaStatus() {
   try {
-    const mod = await import("./dist-TMHSUVTP.js");
+    const mod = await import("./dist-PJFJNXO2.js");
     return await mod.getDaytonaStatus();
   } catch (err) {
     return {
@@ -9137,10 +9215,11 @@ async function runPrepare(providerName, opts = {}) {
   }
   const provider = await getProvider(providerName);
   if (typeof provider.prepare !== "function") {
-    log29.error(`provider '${providerName}' does not implement prepare`);
+    log28.error(`provider '${providerName}' does not implement prepare`);
     process.exit(1);
   }
   const cwd = opts.cwd ?? process.cwd();
+  const registry = providerName === "docker" ? await loadEffectiveConfig(cwd).then((c) => c.effective.box.imageRegistry).catch(() => void 0) : void 0;
   const sp = spinner7();
   sp.start(`preparing ${providerName}\u2026`);
   try {
@@ -9148,16 +9227,18 @@ async function runPrepare(providerName, opts = {}) {
       name: opts.name,
       hostWorkspace: cwd,
       force: opts.force,
+      allowPull: opts.build ? false : void 0,
+      registry,
       onLog: (line) => sp.message(line.slice(0, 80))
     });
     if (result.snapshotName !== void 0) {
       sp.stop(`prepared ${providerName}: snapshot '${result.snapshotName}'`);
       try {
         const written = await setConfigValue("project", "box.image", result.snapshotName, cwd);
-        log29.success(`box.image = ${result.snapshotName} (written to ${written.path})`);
+        log28.success(`box.image = ${result.snapshotName} (written to ${written.path})`);
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
-        log29.warn(
+        log28.warn(
           `prepared snapshot '${result.snapshotName}', but failed to pin it into the project config: ${msg}
 Run \`agentbox config set --project box.image ${result.snapshotName}\` manually.`
         );
@@ -9170,7 +9251,7 @@ Run \`agentbox config set --project box.image ${result.snapshotName}\` manually.
       await showStatus({ onlyProvider: providerName });
     }
     if (!opts.suppressTip) {
-      log29.info(
+      log28.info(
         "tip: install the agentbox host skill so Claude Code on this machine can drive AgentBox for you:\n  npx skills add https://github.com/madarco/agentbox --skill agentbox"
       );
     }
@@ -9184,7 +9265,10 @@ var prepareCommand = new Command24("prepare").description(
 ).option(
   "-p, --provider <name>",
   "provider to prepare (docker | daytona | hetzner | vercel). Omit for status-only."
-).option("-n, --name <name>", "snapshot name (Daytona only; default: agentbox-base-<timestamp>)").option("-f, --force", "rebuild even if the image / snapshot already exists").option("-y, --yes", "skip confirmation prompts (cost / time warnings)").option("--status", "show status without preparing anything").action(async (opts) => {
+).option("-n, --name <name>", "snapshot name (Daytona only; default: agentbox-base-<timestamp>)").option("-f, --force", "rebuild even if the image / snapshot already exists").option(
+  "--build",
+  "docker: build the base image locally instead of pulling the prebuilt one from the registry"
+).option("-y, --yes", "skip confirmation prompts (cost / time warnings)").option("--status", "show status without preparing anything").action(async (opts) => {
   if (!opts.provider || opts.status) {
     await showStatus({});
     return;
@@ -9194,6 +9278,7 @@ var prepareCommand = new Command24("prepare").description(
   await runPrepare(providerName, {
     name: opts.name,
     force: opts.force,
+    build: opts.build,
     yes: opts.yes
   });
 });
@@ -9298,7 +9383,7 @@ ${LOGO_L2}\x1B[0m` + SYNC_END2);
 }
 var LEGACY_INFO_MARKER = "Drive AgentBox from the host:";
 function installTargets() {
-  const home = homedir13();
+  const home = homedir14();
   const claudeSkills = join15(home, ".claude", "skills");
   return [
     { src: join15("agentbox", "SKILL.md"), dest: join15(claudeSkills, "agentbox", "SKILL.md") },
@@ -9349,20 +9434,20 @@ function installHostSkills(opts = {}) {
   for (const t of installTargets()) {
     const src = join15(srcDir, t.src);
     if (!existsSync6(src)) {
-      if (!quiet) log30.warn(`bundled file missing (skipped): ${src}`);
+      if (!quiet) log29.warn(`bundled file missing (skipped): ${src}`);
       skipped++;
       continue;
     }
     if (t.gateDir && !existsSync6(t.gateDir)) continue;
     const reason = writableReason(t.dest, force);
     if (reason === "skip") {
-      if (!quiet) log30.warn(`user-modified file at ${t.dest}, skipping; pass --force to overwrite`);
+      if (!quiet) log29.warn(`user-modified file at ${t.dest}, skipping; pass --force to overwrite`);
       blocked.push(t.dest);
       skipped++;
       continue;
     }
     if (dryRun) {
-      if (!quiet) log30.info(`would write ${t.dest} (${reason})`);
+      if (!quiet) log29.info(`would write ${t.dest} (${reason})`);
       written.push(t.dest);
       continue;
     }
@@ -9394,10 +9479,10 @@ function ensureTty() {
 async function runProviderLogin(name) {
   if (name === "docker") return true;
   if (name === "daytona") {
-    const mod2 = await import("./dist-TMHSUVTP.js");
+    const mod2 = await import("./dist-PJFJNXO2.js");
     const status2 = await mod2.getDaytonaStatus();
     if (status2.configured) {
-      log30.info("daytona: already configured");
+      log29.info("daytona: already configured");
       const rotate = await confirm14({ message: "Re-authenticate Daytona?", initialValue: false });
       if (isCancel15(rotate)) return false;
       if (rotate) await mod2.ensureDaytonaCredentials({ force: true });
@@ -9407,10 +9492,10 @@ async function runProviderLogin(name) {
     return true;
   }
   if (name === "hetzner") {
-    const mod2 = await import("./dist-5FQGYRW5.js");
+    const mod2 = await import("./dist-4SUIXKSD.js");
     const status2 = mod2.readHetznerCredStatus();
     if (status2.source !== "none") {
-      log30.info("hetzner: already configured");
+      log29.info("hetzner: already configured");
       const rotate = await confirm14({ message: "Re-authenticate Hetzner?", initialValue: false });
       if (isCancel15(rotate)) return false;
       if (rotate) await mod2.ensureHetznerCredentials({ force: true });
@@ -9419,10 +9504,10 @@ async function runProviderLogin(name) {
     await mod2.ensureHetznerCredentials();
     return true;
   }
-  const mod = await import("./dist-PZW3GWWU.js");
+  const mod = await import("./dist-HT2YV6PB.js");
   const status = mod.readVercelCredStatus();
   if (status.auth !== "none") {
-    log30.info(`vercel: already configured (${status.auth})`);
+    log29.info(`vercel: already configured (${status.auth})`);
     const rotate = await confirm14({ message: "Re-authenticate Vercel?", initialValue: false });
     if (isCancel15(rotate)) return false;
     if (rotate) await mod.ensureVercelCredentials({ force: true });
@@ -9453,11 +9538,11 @@ async function runInstallWizard(opts = {}) {
   process.stdout.write("  " + formatCompact([sysGroup]) + "\n");
   const hardFail = sysResults.find((r) => r.status === "fail");
   if (hardFail) {
-    log30.error(`system check failed: ${hardFail.label} \u2014 ${hardFail.detail}`);
-    log30.info("run `agentbox doctor` for full detail");
+    log29.error(`system check failed: ${hardFail.label} \u2014 ${hardFail.detail}`);
+    log29.info("run `agentbox doctor` for full detail");
     const cont = await confirm14({ message: "Continue anyway?", initialValue: false });
     if (isCancel15(cont) || !cont) {
-      outro6("aborted");
+      outro5("aborted");
       return false;
     }
   }
@@ -9465,7 +9550,7 @@ async function runInstallWizard(opts = {}) {
   if (opts.provider) {
     const candidate = opts.provider.trim();
     if (!isProviderName(candidate)) {
-      log30.error(`unknown --provider: ${candidate}`);
+      log29.error(`unknown --provider: ${candidate}`);
       return false;
     }
     providerName = candidate;
@@ -9480,7 +9565,7 @@ async function runInstallWizard(opts = {}) {
       }))
     });
     if (isCancel15(picked)) {
-      outro6("cancelled");
+      outro5("cancelled");
       return false;
     }
     providerName = picked;
@@ -9488,14 +9573,14 @@ async function runInstallWizard(opts = {}) {
   if (providerName !== "docker") {
     const loggedIn = await runProviderLogin(providerName);
     if (!loggedIn) {
-      outro6("cancelled");
+      outro5("cancelled");
       return false;
     }
   }
   const prepareMsg = providerName === "docker" ? "Build the box image now? (~1GB, a few minutes)" : `Bake the ${providerName} base snapshot now? (a few minutes, uses cloud time)`;
   const wantPrepare = opts.yes ? true : await confirm14({ message: prepareMsg, initialValue: true });
   if (isCancel15(wantPrepare)) {
-    outro6("cancelled");
+    outro5("cancelled");
     return false;
   }
   if (wantPrepare) {
@@ -9507,12 +9592,12 @@ async function runInstallWizard(opts = {}) {
         suppressTip: true
       });
     } catch (err) {
-      log30.warn(
+      log29.warn(
         `prepare failed: ${err instanceof Error ? err.message : String(err)} \u2014 you can rerun \`agentbox prepare --provider ${providerName}\` later`
       );
     }
   } else {
-    log30.info(
+    log29.info(
       `skipped \u2014 the ${providerName} base will build lazily on first \`agentbox ${providerName === "docker" ? "" : providerName + " "}create\``
     );
   }
@@ -9527,20 +9612,20 @@ async function runInstallWizard(opts = {}) {
       sp.stop(`Agentbox Skills: nothing to write (${String(skillRes.skipped)} skipped)`);
     }
     if (skillRes.blocked.length > 0) {
-      log30.warn(
+      log29.warn(
         `user-modified host skill file(s) left in place: ${skillRes.blocked.join(", ")}
 pass \`agentbox install --skills-only --force\` to overwrite`
       );
     }
   } catch (err) {
     sp.stop("Agentbox Skills: failed");
-    log30.warn(err instanceof Error ? err.message : String(err));
+    log29.warn(err instanceof Error ? err.message : String(err));
   }
   markSetupComplete(providerName);
   const providerGroup = await runProviderChecks(providerName);
   process.stdout.write("  " + formatCompact([sysGroup, providerGroup]) + "\n");
-  note(tutorialBody(providerName), "Next steps");
-  outro6(
+  note2(tutorialBody(providerName), "Next steps");
+  outro5(
     opts.fromAutoTrigger ? "\u2728 Setup complete \u2014 continuing with your command\u2026" : "\u2728 Setup complete"
   );
   return true;
@@ -9560,20 +9645,20 @@ var installCommand = new Command25("install").description(
     try {
       res = installHostSkills({ force: opts.force, dryRun: opts.dryRun });
     } catch (err) {
-      log30.error(err instanceof Error ? err.message : String(err));
+      log29.error(err instanceof Error ? err.message : String(err));
       process.exit(1);
     }
     if (opts.dryRun) {
-      outro6(
+      outro5(
         `dry-run: ${String(res.written.length)} file(s) would be written, ${String(res.skipped)} skipped`
       );
       return;
     }
     if (res.written.length === 0) {
-      outro6(`nothing installed (${String(res.skipped)} skipped)`);
+      outro5(`nothing installed (${String(res.skipped)} skipped)`);
       return;
     }
-    outro6(`installed: ${res.written.join(", ")}`);
+    outro5(`installed: ${res.written.join(", ")}`);
     return;
   }
   const ok = await runInstallWizard({
@@ -9765,7 +9850,7 @@ for (const op of GH_PR_OPS) {
 var gitCommand = new Command27("git").description("Run git / gh pr operations against a box from the host").addCommand(pushCommand).addCommand(fetchCommand).addCommand(pullCommand).addCommand(checkoutCommand).addCommand(statusCommand).addCommand(prCommand);
 
 // src/commands/list.ts
-import { log as log31 } from "@clack/prompts";
+import { log as log30 } from "@clack/prompts";
 import { Command as Command28 } from "commander";
 import { pathToFileURL } from "url";
 
@@ -9980,7 +10065,7 @@ var listCommand2 = withWatchOptions(
   )
 ).action(async (opts) => {
   if (opts.json && opts.watch) {
-    log31.error("cannot combine --json with --watch");
+    log30.error("cannot combine --json with --watch");
     process.exit(2);
   }
   const all = opts.global ?? false;
@@ -9998,7 +10083,7 @@ var listCommand2 = withWatchOptions(
 });
 
 // src/commands/logs.ts
-import { log as log32 } from "@clack/prompts";
+import { log as log31 } from "@clack/prompts";
 import { Command as Command29 } from "commander";
 import { spawn as spawn3 } from "child_process";
 var DAEMON_LOG_PATH = "/var/log/agentbox/ctl-daemon.log";
@@ -10020,9 +10105,9 @@ var logsCommand = new Command29("logs").description("Print recent log lines from
       service = boxArg;
     }
     if (!service && !opts.daemon) {
-      log32.error("missing <service> argument");
-      log32.info("usage: agentbox logs [box] <service> [-n N] [-f]");
-      log32.info("       agentbox logs [box] --daemon [-n N] [-f]");
+      log31.error("missing <service> argument");
+      log31.info("usage: agentbox logs [box] <service> [-n N] [-f]");
+      log31.info("       agentbox logs [box] --daemon [-n N] [-f]");
       process.exit(2);
     }
     const box = await resolveBoxOrExit(idOrName);
@@ -10033,7 +10118,7 @@ var logsCommand = new Command29("logs").description("Print recent log lines from
     if (!opts.follow) {
       const proc = await provider.exec(box, args, { user: "vscode" });
       if (proc.exitCode !== 0) {
-        log32.error(
+        log31.error(
           `${opts.daemon ? "daemon log" : "agentbox-ctl logs"} failed: ${proc.stderr || proc.stdout}`
         );
         process.exit(1);
@@ -10089,10 +10174,10 @@ var logsCommand = new Command29("logs").description("Print recent log lines from
 });
 
 // src/commands/open.ts
-import { log as log33 } from "@clack/prompts";
+import { log as log32 } from "@clack/prompts";
 import { execa as execa3 } from "execa";
 import { existsSync as existsSync7, mkdirSync as mkdirSync6 } from "fs";
-import { homedir as homedir14 } from "os";
+import { homedir as homedir15 } from "os";
 import { join as join16 } from "path";
 import { Command as Command30 } from "commander";
 
@@ -10155,7 +10240,7 @@ var openCommand = new Command30("open").description("Open a box's /workspace in
   }
 });
 async function runCloudOpen(box, provider, opts) {
-  const mountRoot = join16(homedir14(), ".agentbox", "mounts", box.name);
+  const mountRoot = join16(homedir15(), ".agentbox", "mounts", box.name);
   if (opts.unmount) {
     const ok = await tryUnmount(mountRoot);
     if (ok) process.stdout.write(`unmounted ${mountRoot}
@@ -10195,10 +10280,10 @@ async function runCloudOpen(box, provider, opts) {
   if (!existsSync7(mountRoot)) {
     mkdirSync6(mountRoot, { recursive: true, mode: 493 });
   } else if (await isMounted(mountRoot)) {
-    log33.info(`re-mounting (stale mount detected at ${mountRoot})`);
+    log32.info(`re-mounting (stale mount detected at ${mountRoot})`);
     await tryUnmount(mountRoot);
   }
-  log33.info(`mounting ${alias}:/workspace at ${mountRoot}`);
+  log32.info(`mounting ${alias}:/workspace at ${mountRoot}`);
   const mount = await execa3(
     sshfsBin,
     [
@@ -10218,7 +10303,7 @@ async function runCloudOpen(box, provider, opts) {
   if (mount.exitCode !== 0) {
     throw new Error(`sshfs mount failed (exit ${String(mount.exitCode)}): ${mount.stderr || mount.stdout}`);
   }
-  await execa3("open", [mountRoot], { reject: false });
+  await execa3(hostOpenCommand(), [mountRoot], { reject: false });
   process.stdout.write(`opened ${mountRoot}
 `);
   process.stdout.write(`unmount later with: agentbox open ${box.name} --unmount
@@ -10269,7 +10354,7 @@ var pauseCommand = new Command31("pause").description(
 });
 
 // src/commands/prune.ts
-import { confirm as confirm15, isCancel as isCancel16, log as log34 } from "@clack/prompts";
+import { confirm as confirm15, isCancel as isCancel16, log as log33 } from "@clack/prompts";
 import { Command as Command32 } from "commander";
 function totalRemovals(r, projectConfigs) {
   return r.removedRecords.length + r.removedContainers.length + r.removedVolumes.length + r.removedSnapshotDirs.length + r.removedBoxDirs.length + projectConfigs.length;
@@ -10329,7 +10414,7 @@ var pruneCommand = new Command32("prune").description("Clean up orphan state.jso
       return;
     }
     if (opts.provider !== void 0 && opts.provider !== "docker") {
-      log34.error(`unknown provider '${opts.provider}'; expected docker, daytona, hetzner, or vercel`);
+      log33.error(`unknown provider '${opts.provider}'; expected docker, daytona, hetzner, or vercel`);
       process.exit(2);
     }
     const dryRun = opts.dryRun ?? false;
@@ -10342,13 +10427,13 @@ var pruneCommand = new Command32("prune").description("Clean up orphan state.jso
       process.stdout.write("nothing to prune\n");
       return;
     }
-    log34.info(`would remove:
+    log33.info(`would remove:
 ${summary(preview, previewProjects)}`);
     if (dryRun) return;
     if (!opts.yes) {
       const ok = await confirm15({ message: "Proceed with prune?", initialValue: true });
       if (isCancel16(ok) || !ok) {
-        log34.info("cancelled");
+        log33.info("cancelled");
         return;
       }
     }
@@ -10369,7 +10454,7 @@ async function pruneCloud(provider, opts) {
   const dryRun = opts.dryRun ?? false;
   const backend = await cloudBackendForProvider(provider);
   if (!backend.list) {
-    log34.error(`${provider} backend doesn't expose \`list()\`; cannot enumerate sandboxes for prune`);
+    log33.error(`${provider} backend doesn't expose \`list()\`; cannot enumerate sandboxes for prune`);
     process.exit(2);
   }
   const [remote, state] = await Promise.all([backend.list(), readState()]);
@@ -10389,7 +10474,7 @@ async function pruneCloud(provider, opts) {
 `);
     return;
   }
-  log34.info(`found ${String(orphans.length)} ${provider} sandbox(es) not in this CLI's state:`);
+  log33.info(`found ${String(orphans.length)} ${provider} sandbox(es) not in this CLI's state:`);
   for (const sb of orphans) {
     const parts = [sb.sandboxId];
     if (sb.name) parts.push(sb.name);
@@ -10405,7 +10490,7 @@ async function pruneCloud(provider, opts) {
       initialValue: false
     });
     if (isCancel16(ok) || !ok) {
-      log34.info("cancelled");
+      log33.info("cancelled");
       return;
     }
   }
@@ -10417,7 +10502,7 @@ async function pruneCloud(provider, opts) {
       deleted++;
     } catch (err) {
       failed++;
-      log34.warn(
+      log33.warn(
         `delete ${sb.sandboxId} failed: ${err instanceof Error ? err.message : String(err)}`
       );
     }
@@ -10430,7 +10515,7 @@ async function pruneCloud(provider, opts) {
 
 // src/commands/queue.ts
 import { readFile as readFile4, stat as stat5 } from "fs/promises";
-import { intro as intro7, log as log35, outro as outro7 } from "@clack/prompts";
+import { intro as intro7, log as log34, outro as outro6 } from "@clack/prompts";
 import { Command as Command33 } from "commander";
 var TERMINAL_STATUSES = /* @__PURE__ */ new Set(["done", "failed", "cancelled"]);
 var queueCommand = new Command33("queue").description("Inspect and manage background `agentbox claude|codex|opencode -i` jobs");
@@ -10439,8 +10524,8 @@ var queueListCommand = new Command33("list").description("List queued, running,
   const cfg = await loadQueueConfig();
   const visible = opts.all === true ? jobs : jobs.filter((j) => !TERMINAL_STATUSES.has(j.status));
   if (visible.length === 0) {
-    log35.info(opts.all ? "no queued jobs." : "no active queued jobs (--all to see terminal).");
-    log35.info(`queue.maxConcurrent = ${String(cfg.maxConcurrent)} (queue.enabled=${String(cfg.enabled)})`);
+    log34.info(opts.all ? "no queued jobs." : "no active queued jobs (--all to see terminal).");
+    log34.info(`queue.maxConcurrent = ${String(cfg.maxConcurrent)} (queue.enabled=${String(cfg.enabled)})`);
     return;
   }
   const rows = visible.map((j) => ({
@@ -10465,12 +10550,12 @@ var queueListCommand = new Command33("list").description("List queued, running,
       headers.map((h, i) => pad4(String(r[h]), widths[i])).join("  ") + "\n"
     );
   }
-  log35.info(`queue.maxConcurrent = ${String(cfg.maxConcurrent)} (queue.enabled=${String(cfg.enabled)})`);
+  log34.info(`queue.maxConcurrent = ${String(cfg.maxConcurrent)} (queue.enabled=${String(cfg.enabled)})`);
 });
 var queueShowCommand = new Command33("show").description("Dump a job manifest and tail its log").argument("<id>", "queue job id (from `agentbox queue list`)").option("--tail <n>", "lines of log to print (default: 50)", "50").action(async (id, opts) => {
   const job = await readJob(id);
   if (!job) {
-    log35.error(`no job with id ${id}`);
+    log34.error(`no job with id ${id}`);
     process.exit(1);
   }
   process.stdout.write(JSON.stringify(job, null, 2) + "\n");
@@ -10486,18 +10571,18 @@ var queueShowCommand = new Command33("show").description("Dump a job manifest an
     process.stdout.write(slice.join("\n"));
     if (!slice.join("\n").endsWith("\n")) process.stdout.write("\n");
   } catch {
-    log35.info(`(no log at ${job.logPath} yet)`);
+    log34.info(`(no log at ${job.logPath} yet)`);
   }
 });
 var queueCancelCommand = new Command33("cancel").description("Cancel a queued job; running jobs are NOT killed \u2014 use `agentbox destroy` instead").argument("<id>", "queue job id (from `agentbox queue list`)").action(async (id) => {
   intro7(`Cancelling queue job ${id}...`);
   const job = await readJob(id);
   if (!job) {
-    log35.error(`no job with id ${id}`);
+    log34.error(`no job with id ${id}`);
     process.exit(1);
   }
   if (job.status !== "queued") {
-    log35.error(
+    log34.error(
       `job ${id} is ${job.status}; cancel only flips 'queued' \u2192 'cancelled'.` + (job.status === "running" ? ` Use 'agentbox destroy ${job.boxName || id}' to stop the box.` : "")
     );
     process.exit(1);
@@ -10509,7 +10594,7 @@ var queueCancelCommand = new Command33("cancel").description("Cancel a queued jo
     reason: "cancelled by user"
   };
   await writeJob(cancelled);
-  outro7(`job ${id} cancelled`);
+  outro6(`job ${id} cancelled`);
 });
 var queueClearCommand = new Command33("clear").description("Sweep terminal-state manifests from ~/.agentbox/queue/").option("--done", "remove done jobs").option("--failed", "remove failed jobs").option("--cancelled", "remove cancelled jobs").option("--all", "remove every terminal-state job (done + failed + cancelled)").action(async (opts) => {
   const targets = /* @__PURE__ */ new Set();
@@ -10517,7 +10602,7 @@ var queueClearCommand = new Command33("clear").description("Sweep terminal-state
   if (opts.all === true || opts.failed === true) targets.add("failed");
   if (opts.all === true || opts.cancelled === true) targets.add("cancelled");
   if (targets.size === 0) {
-    log35.error("pick at least one of: --done, --failed, --cancelled, --all");
+    log34.error("pick at least one of: --done, --failed, --cancelled, --all");
     process.exit(2);
   }
   const jobs = await loadQueue();
@@ -10527,7 +10612,7 @@ var queueClearCommand = new Command33("clear").description("Sweep terminal-state
     await deleteJob(j.id);
     removed += 1;
   }
-  log35.success(`removed ${String(removed)} manifest${removed === 1 ? "" : "s"}`);
+  log34.success(`removed ${String(removed)} manifest${removed === 1 ? "" : "s"}`);
 });
 var QUEUE_WAIT_EVENTS = [
   "new-box",
@@ -10544,7 +10629,7 @@ var queueWaitForCommand = new Command33("wait-for").description(
   `Block until a queue / box event fires. <event> one of: ${QUEUE_WAIT_EVENTS.join(" | ")}.`
 ).argument("<event>", `target event: ${QUEUE_WAIT_EVENTS.join(" | ")}`).option("--box <ref>", "box ref (required for box-paused / box-running / box-stopped)").option("--job <id>", "queue job id (required for job-done)").option("--timeout <ms>", `wall-clock cap (default: ${String(DEFAULT_QUEUE_WAIT_TIMEOUT_MS)})`).option("--json", "emit a JSON envelope { matched, elapsedMs, ... }").action(async (eventRaw, opts) => {
   if (!QUEUE_WAIT_EVENTS.includes(eventRaw)) {
-    log35.error(`unknown event '${eventRaw}' (one of: ${QUEUE_WAIT_EVENTS.join(", ")})`);
+    log34.error(`unknown event '${eventRaw}' (one of: ${QUEUE_WAIT_EVENTS.join(", ")})`);
     process.exit(2);
   }
   const event = eventRaw;
@@ -10564,11 +10649,11 @@ var queueWaitForCommand = new Command33("wait-for").description(
       if (opts.json === true) {
         process.stdout.write(JSON.stringify({ matched: false, event, elapsedMs }) + "\n");
       } else {
-        log35.error(`'${event}' did not occur within ${String(timeoutMs)}ms`);
+        log34.error(`'${event}' did not occur within ${String(timeoutMs)}ms`);
       }
       process.exit(1);
     }
-    log35.error(err instanceof Error ? err.message : String(err));
+    log34.error(err instanceof Error ? err.message : String(err));
     process.exit(1);
   }
 });
@@ -10665,7 +10750,7 @@ function truncate(s, max) {
 }
 
 // src/commands/relay.ts
-import { log as log36, spinner as spinner9 } from "@clack/prompts";
+import { log as log35, spinner as spinner9 } from "@clack/prompts";
 import { Command as Command34 } from "commander";
 async function rehydrateFromState() {
   const state = await readState();
@@ -10759,7 +10844,7 @@ var restartSub = new Command34("restart").description("Stop then start the host
       s2.stop(`relay running on ${ep.hostUrl}`);
     } catch (err) {
       s2.stop("relay start failed");
-      log36.warn(err instanceof Error ? err.message : String(err));
+      log35.warn(err instanceof Error ? err.message : String(err));
       throw err;
     }
   } catch (err) {
@@ -10771,17 +10856,17 @@ var relayCommand = new Command34("relay").description("Manage the host relay pro
 // src/commands/_run-queued-job.ts
 import { Command as Command35 } from "commander";
 var runQueuedJobCommand = new Command35("_run-queued-job").description("internal: run a queued background agent job (do not invoke directly)").argument("<id>", "queue job id (from ~/.agentbox/queue/<id>.json)").action(async (id) => {
-  const log45 = openCommandLog(`queue-${id}`);
-  log45.write(`worker pid=${String(process.pid)} starting for job ${id}`);
+  const log44 = openCommandLog(`queue-${id}`);
+  log44.write(`worker pid=${String(process.pid)} starting for job ${id}`);
   let job = null;
   try {
     job = await readJob(id);
     if (!job) {
-      log45.write(`FATAL: no manifest at id=${id}`);
-      log45.close();
+      log44.write(`FATAL: no manifest at id=${id}`);
+      log44.close();
       process.exit(64);
     }
-    await runDockerJob(job, log45, (boxId) => {
+    await runDockerJob(job, log44, (boxId) => {
       if (job) job = { ...job, boxId };
     });
     const done = {
@@ -10791,12 +10876,12 @@ var runQueuedJobCommand = new Command35("_run-queued-job").description("internal
       exitCode: 0
     };
     await writeJob(done);
-    log45.write(`done`);
-    log45.close();
+    log44.write(`done`);
+    log44.close();
     process.exit(0);
   } catch (err) {
     const msg = err instanceof Error ? err.stack ?? err.message : String(err);
-    log45.write(`FAIL: ${msg}`);
+    log44.write(`FAIL: ${msg}`);
     if (job) {
       try {
         const failed = {
@@ -10810,11 +10895,11 @@ var runQueuedJobCommand = new Command35("_run-queued-job").description("internal
       } catch {
       }
     }
-    log45.close();
+    log44.close();
     process.exit(1);
   }
 });
-async function runDockerJob(job, log45, onBoxCreated) {
+async function runDockerJob(job, log44, onBoxCreated) {
   const opts = job.createOpts;
   const cfg = await loadEffectiveConfig(opts.workspace, {
     cliOverrides: buildOverridesFromJob(job)
@@ -10829,7 +10914,7 @@ async function runDockerJob(job, log45, onBoxCreated) {
   const useSnapshot = opts.hostSnapshot === false ? false : opts.hostSnapshot === true ? true : cfg.effective.box.hostSnapshot ?? false;
   const resolved = job.agent === "claude-code" ? await resolveClaudeAuth(process.env) : null;
   const withPlaywright = cfg.effective.box.withPlaywright || cfg.effective.browser.default !== "agent-browser";
-  log45.write(`creating box for agent=${job.agent}`);
+  log44.write(`creating box for agent=${job.agent}`);
   const result = await createBox({
     workspacePath: opts.workspace,
     name: opts.name && opts.name.length > 0 ? opts.name : void 0,
@@ -10851,19 +10936,19 @@ async function runDockerJob(job, log45, onBoxCreated) {
     portlessStateDir: cfg.effective.portless.stateDir || void 0,
     limits: resolveLimits(cfg.effective.box, opts),
     projectRoot,
-    onLog: (line) => log45.write(line)
+    onLog: (line) => log44.write(line)
   });
-  log45.write(`box created: ${result.record.container}`);
+  log44.write(`box created: ${result.record.container}`);
   onBoxCreated(result.record.id);
   await writeJob({ ...job, boxId: result.record.id });
   const promptedArgs = buildPromptArgs(job.agent, job.prompt, job.agentArgs);
   if (job.agent === "claude-code") {
-    log45.write(`checking plugin native deps`);
+    log44.write(`checking plugin native deps`);
     await rebuildPluginNativeDeps(result.record.container, {
       volume: result.record.claudeConfigVolume ?? SHARED_CLAUDE_VOLUME,
-      onProgress: (line) => log45.write(line)
+      onProgress: (line) => log44.write(line)
     });
-    log45.write(`starting claude session`);
+    log44.write(`starting claude session`);
     await startClaudeSession({
       container: result.record.container,
       claudeArgs: applyClaudeSkipPermissions(promptedArgs, cfg.effective),
@@ -10871,22 +10956,22 @@ async function runDockerJob(job, log45, onBoxCreated) {
       boxName: result.record.name
     });
   } else if (job.agent === "codex") {
-    log45.write(`checking codex`);
+    log44.write(`checking codex`);
     await ensureCodexInstalled(result.record.container, {
-      onProgress: (line) => log45.write(line)
+      onProgress: (line) => log44.write(line)
     });
-    log45.write(`starting codex session`);
+    log44.write(`starting codex session`);
     await startCodexSession({
       container: result.record.container,
       codexArgs: applyCodexSkipPermissions(promptedArgs, cfg.effective),
       sessionName: cfg.effective.codex.sessionName
     });
   } else if (job.agent === "opencode") {
-    log45.write(`checking opencode`);
+    log44.write(`checking opencode`);
     await ensureOpencodeInstalled(result.record.container, {
-      onProgress: (line) => log45.write(line)
+      onProgress: (line) => log44.write(line)
     });
-    log45.write(`starting opencode session`);
+    log44.write(`starting opencode session`);
     await startOpencodeSession({
       container: result.record.container,
       opencodeArgs: promptedArgs,
@@ -10925,7 +11010,7 @@ function buildOverridesFromJob(job) {
 
 // src/commands/screen.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { log as log37 } from "@clack/prompts";
+import { log as log36 } from "@clack/prompts";
 import { Command as Command36 } from "commander";
 var SIGNED_URL_TTL_MIN = 1;
 var SIGNED_URL_TTL_MAX = 86400;
@@ -10956,10 +11041,10 @@ var screenCommand = new Command36("screen").description("Open a box's VNC (noVNC
     if (provider === "docker") {
       const insp = await inspectBox(box.id);
       if (insp.state === "paused") {
-        log37.info("box is paused; unpausing");
+        log36.info("box is paused; unpausing");
         await unpauseBox(box.id);
       } else if (insp.state === "stopped") {
-        log37.info("box is stopped; starting");
+        log36.info("box is stopped; starting");
         await startBox(box.id);
       } else if (insp.state === "missing") {
         throw new Error(`box ${box.name} has no container; was it destroyed?`);
@@ -10969,13 +11054,13 @@ var screenCommand = new Command36("screen").description("Open a box's VNC (noVNC
       const inBoxUrl = exposePort !== void 0 ? box.portlessUrl ?? `http://localhost:${String(exposePort)}` : "about:blank";
       const br = await ensureBoxBrowser(box.container, void 0, inBoxUrl);
       if (br.up && !br.alreadyRunning) {
-        log37.info(
+        log36.info(
           exposePort !== void 0 ? `opened ${inBoxUrl} in the in-box browser (visible in the VNC view)` : "started in-box browser"
         );
       } else if (br.alreadyRunning) {
-        log37.info("in-box browser already running; left it untouched");
+        log36.info("in-box browser already running; left it untouched");
       } else {
-        log37.warn(`could not start in-box browser: ${br.reason ?? "unknown"}`);
+        log36.warn(`could not start in-box browser: ${br.reason ?? "unknown"}`);
       }
       const engine = await detectEngine();
       const urls = buildVncUrls(box, engine);
@@ -10996,10 +11081,10 @@ var screenCommand = new Command36("screen").description("Open a box's VNC (noVNC
       const p = await providerForBox(box);
       const state = await p.probeState(box);
       if (state === "paused") {
-        log37.info("box is paused; resuming");
+        log36.info("box is paused; resuming");
         await p.resume(box);
       } else if (state === "stopped") {
-        log37.info("box is stopped; starting");
+        log36.info("box is stopped; starting");
         await p.start(box);
       } else if (state === "missing") {
         throw new Error(`cloud sandbox for ${box.name} is missing; was it deleted?`);
@@ -11014,14 +11099,14 @@ var screenCommand = new Command36("screen").description("Open a box's VNC (noVNC
             user: "vscode"
           });
           if (br.exitCode === 0) {
-            log37.info(`opened ${webUrl} in the in-box browser (visible in the VNC view)`);
+            log36.info(`opened ${webUrl} in the in-box browser (visible in the VNC view)`);
           } else {
-            log37.warn(
+            log36.warn(
               `could not open in-box browser (continuing): ${br.stderr.trim() || br.stdout.trim() || `exit ${String(br.exitCode)}`}`
             );
           }
         } catch (err) {
-          log37.warn(
+          log36.warn(
             `in-box browser skipped: ${err instanceof Error ? err.message : String(err)}`
           );
         }
@@ -11034,7 +11119,7 @@ var screenCommand = new Command36("screen").description("Open a box's VNC (noVNC
 `);
       return;
     }
-    const opened = spawnSync3("open", [url], { stdio: "inherit" });
+    const opened = spawnSync3(hostOpenCommand(), [url], { stdio: "inherit" });
     if (opened.status !== 0) {
       throw new Error(`open ${url} failed (exit ${String(opened.status ?? "n/a")})`);
     }
@@ -11047,18 +11132,18 @@ var screenCommand = new Command36("screen").description("Open a box's VNC (noVNC
 
 // src/commands/shell.ts
 import { spawnSync as spawnSync4 } from "child_process";
-import { log as log39 } from "@clack/prompts";
+import { log as log38 } from "@clack/prompts";
 import { Command as Command37 } from "commander";
 
 // src/commands/_provider-guard.ts
-import { log as log38 } from "@clack/prompts";
+import { log as log37 } from "@clack/prompts";
 function requireDockerProvider(box, commandName) {
   const provider = box.provider ?? "docker";
   if (provider === "docker") return;
-  log38.error(
+  log37.error(
     `\`agentbox ${commandName}\` doesn't yet support cloud boxes (this box's provider is '${provider}').`
   );
-  log38.info(
+  log37.info(
     "Cloud-provider routing for this command is on the Phase 3 backlog. For now: use `agentbox url` for web access, `agentbox-ctl git push` from inside the sandbox via SSH/web terminal, or fall back to the cloud provider's own console."
   );
   process.exit(2);
@@ -11098,10 +11183,10 @@ function fmtAgo2(iso) {
 async function ensureBoxRunning(box) {
   const insp = await inspectBox(box.id);
   if (insp.state === "paused") {
-    log39.info("box is paused; unpausing");
+    log38.info("box is paused; unpausing");
     await unpauseBox(box.id);
   } else if (insp.state === "stopped") {
-    log39.info("box is stopped; starting");
+    log38.info("box is stopped; starting");
     await startBox(box.id);
   } else if (insp.state === "missing") {
     throw new Error(`box ${box.name} has no container; was it destroyed?`);
@@ -11140,7 +11225,7 @@ async function startOrAttachShell(box, cfg) {
   const label = shellLabel(cfg.sessionName);
   const info = await shellSessionInfo(box.container, cfg.sessionName, cfg.user);
   if (info.running) {
-    log39.info(`reattaching to shell "${label}" \u2014 Control+a d to detach`);
+    log38.info(`reattaching to shell "${label}" \u2014 Control+a d to detach`);
   } else {
     await startShellSession({
       container: box.container,
@@ -11148,7 +11233,7 @@ async function startOrAttachShell(box, cfg) {
       user: cfg.user,
       login: cfg.login
     });
-    log39.info(`shell "${label}" \u2014 Control+a d to detach, leaves it running`);
+    log38.info(`shell "${label}" \u2014 Control+a d to detach, leaves it running`);
   }
   const code = await runWrappedAttach({
     container: box.container,
@@ -11301,11 +11386,11 @@ var shellLsCommand = new Command37("ls").description("List the shell tmux sessio
     requireDockerProvider(box, "shell");
     const insp = await inspectBox(box.id);
     if (insp.state !== "running") {
-      log39.info(`box ${box.name} is ${insp.state} \u2014 no live shell sessions`);
+      log38.info(`box ${box.name} is ${insp.state} \u2014 no live shell sessions`);
       return;
     }
     if (insp.shellSessions.length === 0) {
-      log39.info(
+      log38.info(
         `no shell sessions in ${box.name} \u2014 start one with: agentbox shell ${reattachRef4(box)}`
       );
       return;
@@ -11325,25 +11410,25 @@ var shellKillCommand = new Command37("kill").description("Kill a shell tmux sess
     requireDockerProvider(box, "shell");
     const insp = await inspectBox(box.id);
     if (insp.state !== "running") {
-      log39.info(`box ${box.name} is ${insp.state} \u2014 no shell sessions to kill`);
+      log38.info(`box ${box.name} is ${insp.state} \u2014 no shell sessions to kill`);
       return;
     }
     if (opts.all) {
       if (insp.shellSessions.length === 0) {
-        log39.info(`no shell sessions in ${box.name}`);
+        log38.info(`no shell sessions in ${box.name}`);
         return;
       }
       let killed = 0;
       for (const s of insp.shellSessions) {
         if (await killShellSession(box.container, s.sessionName)) killed++;
       }
-      log39.success(`killed ${String(killed)} shell session${killed === 1 ? "" : "s"} in ${box.name}`);
+      log38.success(`killed ${String(killed)} shell session${killed === 1 ? "" : "s"} in ${box.name}`);
       return;
     }
     const target = shellSessionName(opts.name);
     const ok = await killShellSession(box.container, target);
-    if (ok) log39.success(`killed shell "${shellLabel(target)}" in ${box.name}`);
-    else log39.warn(`no shell "${shellLabel(target)}" in ${box.name} (already gone?)`);
+    if (ok) log38.success(`killed shell "${shellLabel(target)}" in ${box.name}`);
+    else log38.warn(`no shell "${shellLabel(target)}" in ${box.name} (already gone?)`);
   } catch (err) {
     handleLifecycleError(err);
   }
@@ -11377,7 +11462,7 @@ var startCommand = new Command38("start").description(
 });
 
 // src/commands/status.ts
-import { log as log41 } from "@clack/prompts";
+import { log as log40 } from "@clack/prompts";
 import { Command as Command39 } from "commander";
 
 // src/endpoints-render.ts
@@ -11408,7 +11493,7 @@ function renderEndpointLines(endpoints, stream) {
 }
 
 // src/commands/inspect.ts
-import { log as log40 } from "@clack/prompts";
+import { log as log39 } from "@clack/prompts";
 function fmtLimit(n, unit) {
   return n && n > 0 ? `${String(n)}${unit}` : "unlimited";
 }
@@ -11553,7 +11638,7 @@ function renderCodexActivityCloud(persisted) {
 async function runInspect(box, opts) {
   try {
     if (opts.json && opts.watch) {
-      log40.error("cannot combine --json with --watch");
+      log39.error("cannot combine --json with --watch");
       process.exit(2);
     }
     const isCloud = (box.provider ?? "docker") !== "docker";
@@ -11597,7 +11682,7 @@ var statusCommand2 = withWatchOptions(
 ).action(async (idOrName, opts) => {
   try {
     if (opts.json && opts.watch) {
-      log41.error("cannot combine --json with --watch");
+      log40.error("cannot combine --json with --watch");
       process.exit(2);
     }
     const box = await resolveBoxOrExit(idOrName);
@@ -11926,7 +12011,7 @@ var unpauseCommand = new Command42("unpause").description(
 
 // src/commands/update.ts
 import { spawn as spawn4 } from "child_process";
-import { confirm as confirm16, intro as intro8, isCancel as isCancel17, log as log42, outro as outro8, spinner as spinner10 } from "@clack/prompts";
+import { confirm as confirm16, intro as intro8, isCancel as isCancel17, log as log41, outro as outro7, spinner as spinner10 } from "@clack/prompts";
 import { Command as Command43 } from "commander";
 
 // src/exec-method.ts
@@ -11981,7 +12066,7 @@ var updateCommand = new Command43("self-update").description(
     });
     intro8("agentbox self-update");
     const selfStep = opts.skipSelf ? "self-update: skipped (--skip-self)" : describeSelfUpdate(method);
-    log42.info(
+    log41.info(
       [
         "plan:",
         `  ${selfStep}`,
@@ -11990,31 +12075,31 @@ var updateCommand = new Command43("self-update").description(
       ].join("\n")
     );
     if (opts.dryRun) {
-      outro8("dry run \u2014 nothing changed");
+      outro7("dry run \u2014 nothing changed");
       return;
     }
     if (!opts.yes) {
       const ok = await confirm16({ message: "Proceed with update?", initialValue: true });
       if (isCancel17(ok) || !ok) {
-        log42.info("cancelled");
+        log41.info("cancelled");
         return;
       }
     }
     let selfUpdated = false;
     if (opts.skipSelf) {
-      log42.info("skipping self-update (--skip-self)");
+      log41.info("skipping self-update (--skip-self)");
     } else {
       const cmd = selfUpdateCommand(method);
       if (cmd === null) {
-        log42.info(describeSelfUpdate(method));
+        log41.info(describeSelfUpdate(method));
       } else {
-        log42.info(`running: ${cmd.cmd} ${cmd.args.join(" ")}`);
+        log41.info(`running: ${cmd.cmd} ${cmd.args.join(" ")}`);
         const code = await runInherit(cmd.cmd, cmd.args);
         if (code !== 0) {
           throw new Error(`${cmd.cmd} exited with code ${String(code)}`);
         }
         selfUpdated = true;
-        log42.success(`updated ${PKG} via ${cmd.cmd}`);
+        log41.success(`updated ${PKG} via ${cmd.cmd}`);
       }
     }
     const s = spinner10();
@@ -12030,7 +12115,7 @@ var updateCommand = new Command43("self-update").description(
       stop.stopped ? `stopped relay (pid ${String(stop.pid)})` : "relay was not running"
     );
     if (selfUpdated) {
-      log42.info(
+      log41.info(
         "relay will restart automatically (with the updated build) on your next `agentbox create` / `agentbox claude`"
       );
     } else {
@@ -12041,12 +12126,12 @@ var updateCommand = new Command43("self-update").description(
         sr2.stop(`relay back up on ${ep.hostUrl}`);
       } catch (err) {
         sr2.stop("relay restart failed");
-        log42.warn(
+        log41.warn(
           `${err instanceof Error ? err.message : String(err)} \u2014 it will retry on the next box command`
         );
       }
     }
-    outro8("update complete");
+    outro7("update complete");
   } catch (err) {
     handleLifecycleError(err);
   }
@@ -12054,7 +12139,7 @@ var updateCommand = new Command43("self-update").description(
 
 // src/commands/url.ts
 import { spawnSync as spawnSync5 } from "child_process";
-import { log as log43 } from "@clack/prompts";
+import { log as log42 } from "@clack/prompts";
 import { Command as Command44 } from "commander";
 var SIGNED_URL_TTL_MIN2 = 1;
 var SIGNED_URL_TTL_MAX2 = 86400;
@@ -12087,10 +12172,10 @@ var urlCommand = new Command44("url").description(
     if (provider === "docker") {
       const insp = await inspectBox(box.id);
       if (insp.state === "paused") {
-        log43.info("box is paused; unpausing");
+        log42.info("box is paused; unpausing");
         await unpauseBox(box.id);
       } else if (insp.state === "stopped") {
-        log43.info("box is stopped; starting");
+        log42.info("box is stopped; starting");
         await startBox(box.id);
       } else if (insp.state === "missing") {
         throw new Error(`box ${box.name} has no container; was it destroyed?`);
@@ -12119,10 +12204,10 @@ var urlCommand = new Command44("url").description(
       const p = await providerForBox(box);
       const state = await p.probeState(box);
       if (state === "paused") {
-        log43.info("box is paused; resuming");
+        log42.info("box is paused; resuming");
         await p.resume(box);
       } else if (state === "stopped") {
-        log43.info("box is stopped; starting");
+        log42.info("box is stopped; starting");
         await p.start(box);
       } else if (state === "missing") {
         throw new Error(`cloud sandbox for ${box.name} is missing; was it deleted?`);
@@ -12134,7 +12219,7 @@ var urlCommand = new Command44("url").description(
 `);
       return;
     }
-    const opened = spawnSync5("open", [url], { stdio: "inherit" });
+    const opened = spawnSync5(hostOpenCommand(), [url], { stdio: "inherit" });
     if (opened.status !== 0) {
       throw new Error(`open ${url} failed (exit ${String(opened.status ?? "n/a")})`);
     }
@@ -12146,7 +12231,7 @@ var urlCommand = new Command44("url").description(
 });
 
 // src/commands/wait.ts
-import { log as log44 } from "@clack/prompts";
+import { log as log43 } from "@clack/prompts";
 import { Command as Command45 } from "commander";
 var waitCommand = new Command45("wait").description("Block until the box reports all autostart units ready").argument(
   "[box]",
@@ -12164,7 +12249,7 @@ var waitCommand = new Command45("wait").description("Block until the box reports
     try {
       parsed = JSON.parse(proc.stdout);
     } catch {
-      log44.error(`agentbox-ctl wait-ready failed: ${proc.stderr || proc.stdout}`);
+      log43.error(`agentbox-ctl wait-ready failed: ${proc.stderr || proc.stdout}`);
       process.exit(1);
     }
     if (opts.json) {