@madarco/agentbox 0.11.3 → 0.13.0

package/dist/{chunk-MXXXKJYS.js → chunk-4NQXNQ53.js}

@@ -1,5 +1,8 @@
 #!/usr/bin/env node
 import {
+  BOX_DYNAMIC_SYNC_MANIFEST,
+  BOX_MEMORY_DIR,
+  BOX_WORKFLOWS_DIR,
   CLAUDE_FORWARDED_ENV_KEYS,
   CODEX_CREDENTIALS_BACKUP_FILE,
   CODEX_FORWARDED_ENV_KEYS,
@@ -7,7 +10,9 @@ import {
   OPENCODE_CREDENTIALS_BACKUP_FILE,
   OPENCODE_FORWARDED_ENV_KEYS,
   buildHostEnvFindArgs,
+  buildHostSyncManifest,
   buildTmuxConfigShellSnippet,
+  computeSyncDelta,
   ensureRelay,
   forgetBoxFromRelay,
   generateBoxId,
@@ -25,13 +30,16 @@ import {
   stageClaudeStaticForUpload,
   stageCodexCredentialsForUpload,
   stageCodexStaticForUpload,
+  stageDynamicSyncTarball,
   stageOpencodeCredentialsForUpload,
   stageOpencodeStateForUpload,
   stageOpencodeStaticForUpload
-} from "./chunk-ZJXTIH6C.js";
+} from "./chunk-B4QG2MCW.js";
 import {
   allocateProjectIndex,
   detectGitRepos,
+  readCliStamp,
+  readPreparedStateRaw,
   readState,
   recordBox,
   removeBoxRecord
@@ -41,24 +49,28 @@ import {
 import { basename as basename2 } from "path";
 import { chmod, mkdir, writeFile } from "fs/promises";
 import { dirname } from "path";
-import { mkdir as mkdir2, readFile, readdir, rm, writeFile as writeFile2 } from "fs/promises";
-import { homedir } from "os";
-import { basename, join } from "path";
-import { mkdtemp, rm as rm2, writeFile as writeFile3 } from "fs/promises";
+import { mkdtemp, rm, writeFile as writeFile2 } from "fs/promises";
 import { tmpdir } from "os";
-import { join as join2 } from "path";
+import { dirname as dirname2, join } from "path";
 import { execa } from "execa";
-import { mkdtemp as mkdtemp2, rm as rm3 } from "fs/promises";
+import { mkdir as mkdir2, readFile, readdir, rm as rm2, writeFile as writeFile3 } from "fs/promises";
+import { homedir } from "os";
+import { basename, join as join2 } from "path";
+import { mkdtemp as mkdtemp2, rm as rm3, writeFile as writeFile4 } from "fs/promises";
 import { tmpdir as tmpdir2 } from "os";
 import { join as join3 } from "path";
 import { execa as execa2 } from "execa";
-import { readFile as readFile2 } from "fs/promises";
+import { mkdtemp as mkdtemp3, rm as rm4 } from "fs/promises";
+import { tmpdir as tmpdir3 } from "os";
 import { join as join4 } from "path";
-import { parse as parseYaml } from "yaml";
 import { execa as execa3 } from "execa";
+import { readFile as readFile2 } from "fs/promises";
+import { join as join5 } from "path";
+import { parse as parseYaml } from "yaml";
+import { execa as execa4 } from "execa";
 import { existsSync, mkdirSync, renameSync, statSync } from "fs";
-import { mkdtemp as mkdtemp3, rm as rm4 } from "fs/promises";
-import { tmpdir as tmpdir3 } from "os";
+import { mkdtemp as mkdtemp4, rm as rm5 } from "fs/promises";
+import { tmpdir as tmpdir4 } from "os";
 import {
   basename as hostBasename,
   dirname as hostDirname,
@@ -66,10 +78,10 @@ import {
   resolve as hostResolve
 } from "path";
 import { posix } from "path";
-import { execa as execa4 } from "execa";
-import { mkdtemp as mkdtemp4, rm as rm5, stat } from "fs/promises";
-import { tmpdir as tmpdir4 } from "os";
-import { join as join5 } from "path";
+import { execa as execa5 } from "execa";
+import { mkdtemp as mkdtemp5, rm as rm6, stat } from "fs/promises";
+import { tmpdir as tmpdir5 } from "os";
+import { join as join6 } from "path";
 var CREDENTIALS_VOLUME = "agentbox-credentials";
 var AGENT_SPECS = [
   {
@@ -267,30 +279,132 @@ async function extractCloudAgentCredentials(backend, handle, opts = {}) {
   }
   return extracted;
 }
-var CLOUD_CHECKPOINTS_ROOT = join(homedir(), ".agentbox", "cloud-checkpoints");
+function sq(p) {
+  return `'${p.replace(/'/g, `'\\''`)}'`;
+}
+var REMOTE_TAR = "/tmp/agentbox-dynsync.tar.gz";
+var BOX_STAGE = "/tmp/agentbox-dynsync-stage";
+async function seedDynamicConfig(backend, handle, opts) {
+  const log = opts.onLog ?? (() => {
+  });
+  try {
+    let boxManifest = null;
+    try {
+      const res = await backend.exec(handle, `cat ${BOX_DYNAMIC_SYNC_MANIFEST} 2>/dev/null || true`);
+      const out = res.stdout.trim();
+      if (res.exitCode === 0 && out.length > 0) {
+        boxManifest = JSON.parse(out);
+      }
+    } catch {
+      boxManifest = null;
+    }
+    const host = await buildHostSyncManifest(opts.workspacePath);
+    const delta = computeSyncDelta(host, boxManifest);
+    if (delta.uploads.length === 0 && delta.deletions.length === 0) {
+      log("claude workflows + memory already up to date in box");
+      return;
+    }
+    delta.nextManifest.syncedAt = (/* @__PURE__ */ new Date()).toISOString();
+    const staged = await stageDynamicSyncTarball(delta.uploads);
+    const manifestDir = await mkdtemp(join(tmpdir(), "agentbox-dynsync-manifest-"));
+    const manifestTmp = join(manifestDir, "dynamic-sync.json");
+    await writeFile2(manifestTmp, JSON.stringify(delta.nextManifest, null, 2));
+    try {
+      const steps = [
+        "set -e",
+        `mkdir -p /home/vscode/.agentbox ${BOX_WORKFLOWS_DIR} ${BOX_MEMORY_DIR}`
+      ];
+      if (staged.tarballPath) {
+        await backend.uploadFile(handle, staged.tarballPath, REMOTE_TAR);
+        steps.push(
+          `rm -rf ${BOX_STAGE}`,
+          `mkdir -p ${BOX_STAGE}`,
+          `tar -xzf ${REMOTE_TAR} -C ${BOX_STAGE}`,
+          `if [ -d ${BOX_STAGE}/workflows ]; then cp -a ${BOX_STAGE}/workflows/. ${BOX_WORKFLOWS_DIR}/; fi`,
+          `if [ -d ${BOX_STAGE}/memory ]; then cp -a ${BOX_STAGE}/memory/. ${BOX_MEMORY_DIR}/; fi`,
+          `rm -rf ${BOX_STAGE} ${REMOTE_TAR}`
+        );
+      }
+      for (const d of delta.deletions) {
+        steps.push(`rm -f ${sq(d.dst)}`);
+      }
+      const res = await backend.exec(handle, steps.join("; "));
+      if (res.exitCode !== 0) {
+        log(
+          `dynamic config seed failed (exit ${String(res.exitCode)}): ${res.stderr.slice(-200)}`
+        );
+        return;
+      }
+      await backend.uploadFile(handle, manifestTmp, BOX_DYNAMIC_SYNC_MANIFEST);
+      log(
+        `seeded claude workflows + memory: ${String(delta.uploads.length)} file(s) updated, ${String(delta.deletions.length)} removed`
+      );
+    } finally {
+      await staged.cleanup();
+      await rm(dirname2(manifestTmp), { recursive: true, force: true });
+    }
+  } catch (err) {
+    log(
+      `claude workflows + memory seed skipped (non-fatal): ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+}
+function quoteShellArgv(argv) {
+  return argv.map(quoteShellArg).join(" ");
+}
+function quoteShellArg(arg) {
+  if (arg.length === 0) return "''";
+  if (/^[A-Za-z0-9_@%+=:,./-]+$/.test(arg)) return arg;
+  return "'" + arg.replace(/'/g, "'\\''") + "'";
+}
+function bashScript(body) {
+  return `bash -c ${quoteShellArg(body)}`;
+}
+var FALLBACK_NAME = "agentbox";
+var FALLBACK_EMAIL = "agentbox@users.noreply.github.com";
+async function seedGitIdentity(backend, handle, opts = {}) {
+  const log = opts.onLog ?? (() => {
+  });
+  const name = await readHostGitConfig("user.name", opts.hostRepo) ?? FALLBACK_NAME;
+  const email = await readHostGitConfig("user.email", opts.hostRepo) ?? FALLBACK_EMAIL;
+  const script = `git config --global user.name ${quoteShellArg(name)} && git config --global user.email ${quoteShellArg(email)}`;
+  const r = await backend.exec(handle, bashScript(script));
+  if (r.exitCode !== 0) {
+    log(`git: identity config failed (exit ${String(r.exitCode)}): ${(r.stderr || r.stdout).trim()}`);
+    return;
+  }
+  log(`git: configured committer identity ${name} <${email}>`);
+}
+async function readHostGitConfig(key, hostRepo) {
+  const args = hostRepo ? ["-C", hostRepo, "config", key] : ["config", key];
+  const r = await execa("git", args, { reject: false });
+  if (r.exitCode !== 0) return null;
+  const value = (r.stdout ?? "").trim();
+  return value.length > 0 ? value : null;
+}
+var CLOUD_CHECKPOINTS_ROOT = join2(homedir(), ".agentbox", "cloud-checkpoints");
 var CLOUD_SNAPSHOT_NAME_PREFIX = "agentbox-ckpt-";
 function cloudSnapshotName(projectRoot, name) {
   const mnemonic = sanitizeMnemonic(basename(projectRoot));
   return `${CLOUD_SNAPSHOT_NAME_PREFIX}${hashProjectPath(projectRoot)}_${mnemonic}-${name}`;
 }
 function backendDir(backend, projectRoot) {
-  return join(CLOUD_CHECKPOINTS_ROOT, backend, projectDirSegment(projectRoot));
+  return join2(CLOUD_CHECKPOINTS_ROOT, backend, projectDirSegment(projectRoot));
 }
 function checkpointDir(backend, projectRoot, name) {
-  return join(backendDir(backend, projectRoot), name);
+  return join2(backendDir(backend, projectRoot), name);
 }
 async function readManifest(dir) {
   try {
-    const raw = await readFile(join(dir, "manifest.json"), "utf8");
+    const raw = await readFile(join2(dir, "manifest.json"), "utf8");
     const m = JSON.parse(raw);
-    if (m.schema !== 1) return null;
+    if (m.schema !== 1 && m.schema !== 2) return null;
     return m;
   } catch {
     return null;
   }
 }
-async function listCloudCheckpoints(projectRoot, backend) {
-  const root = backendDir(backend, projectRoot);
+async function listCloudCheckpointsInDir(root) {
   let entries;
   try {
     entries = (await readdir(root, { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
@@ -299,13 +413,31 @@ async function listCloudCheckpoints(projectRoot, backend) {
   }
   const out = [];
   for (const name of entries) {
-    const dir = join(root, name);
+    const dir = join2(root, name);
     const manifest = await readManifest(dir);
     if (manifest) out.push({ name, dir, manifest });
   }
   out.sort((a, b) => a.manifest.createdAt.localeCompare(b.manifest.createdAt));
   return out;
 }
+async function listCloudCheckpoints(projectRoot, backend) {
+  return listCloudCheckpointsInDir(backendDir(backend, projectRoot));
+}
+async function listAllCloudCheckpoints(backend) {
+  const backendRoot = join2(CLOUD_CHECKPOINTS_ROOT, backend);
+  let segments;
+  try {
+    segments = (await readdir(backendRoot, { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const segment of segments) {
+    const items = await listCloudCheckpointsInDir(join2(backendRoot, segment));
+    if (items.length > 0) out.push({ segment, items });
+  }
+  return out;
+}
 async function resolveCloudCheckpoint(projectRoot, backend, ref) {
   const dir = checkpointDir(backend, projectRoot, ref);
   const manifest = await readManifest(dir);
@@ -316,22 +448,33 @@ async function writeCloudCheckpointManifest(projectRoot, backend, name, fields)
   const dir = checkpointDir(backend, projectRoot, name);
   await mkdir2(dir, { recursive: true });
   const manifest = {
-    schema: 1,
+    schema: 2,
     name,
     backend,
     snapshotName: fields.snapshotName,
     sourceBoxId: fields.sourceBoxId,
     sourceBoxName: fields.sourceBoxName,
+    baseProvider: fields.baseProvider,
+    baseFingerprint: fields.baseFingerprint,
+    cliVersion: fields.cliVersion,
     createdAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  await writeFile2(join(dir, "manifest.json"), JSON.stringify(manifest, null, 2) + "\n", "utf8");
+  await writeFile3(join2(dir, "manifest.json"), JSON.stringify(manifest, null, 2) + "\n", "utf8");
   return { name, dir, manifest };
 }
+function currentCloudBaseFingerprint(provider) {
+  try {
+    const raw = readPreparedStateRaw(provider);
+    return raw?.base?.contextSha256;
+  } catch {
+    return void 0;
+  }
+}
 async function removeCloudCheckpointDir(projectRoot, backend, name) {
   const dir = checkpointDir(backend, projectRoot, name);
   const existed = await readManifest(dir) !== null;
   if (!existed) return false;
-  await rm(dir, { recursive: true, force: true });
+  await rm2(dir, { recursive: true, force: true });
   return true;
 }
 async function probeCloudCheckpoint(backend, projectRoot, ref) {
@@ -362,7 +505,7 @@ async function uploadEnvFiles(args) {
   });
   if (args.files.length === 0) return { copied: 0 };
   const workspaceDir = args.workspaceDir ?? WORKSPACE_DIR_DEFAULT;
-  const found = await execa("find", buildHostEnvFindArgs(args.files).slice(1), {
+  const found = await execa2("find", buildHostEnvFindArgs(args.files).slice(1), {
     cwd: args.workspacePath,
     reject: false
   });
@@ -372,10 +515,10 @@ async function uploadEnvFiles(args) {
   }
   const list = String(found.stdout).split("\0").filter((p) => p.length > 0);
   if (list.length === 0) return { copied: 0 };
-  const stage = await mkdtemp(join2(tmpdir(), "agentbox-envfiles-"));
-  const localTar = join2(stage, "envfiles.tar");
+  const stage = await mkdtemp2(join3(tmpdir2(), "agentbox-envfiles-"));
+  const localTar = join3(stage, "envfiles.tar");
   try {
-    const packed = await execa(
+    const packed = await execa2(
       "tar",
       ["-C", args.workspacePath, "--null", "-T", "-", "-cf", localTar],
       { input: list.join("\0"), reject: false }
@@ -384,7 +527,7 @@ async function uploadEnvFiles(args) {
       log(`env-file tar pack failed: ${String(packed.stderr).slice(0, 300)}`);
       return { copied: 0 };
     }
-    await writeFile3(join2(stage, ".marker"), "").catch(() => {
+    await writeFile4(join3(stage, ".marker"), "").catch(() => {
     });
     await args.backend.uploadFile(args.handle, localTar, REMOTE_TAR_PATH);
     const extract = await args.backend.exec(
@@ -398,7 +541,7 @@ async function uploadEnvFiles(args) {
       return { copied: 0 };
     }
   } finally {
-    await rm2(stage, { recursive: true, force: true });
+    await rm3(stage, { recursive: true, force: true });
   }
   return { copied: list.length };
 }
@@ -409,7 +552,7 @@ async function uploadCarryPaths(args) {
   if (args.entries.length === 0) {
     return { copied: 0, errors: [], applied: [] };
   }
-  const stage = await mkdtemp2(join3(tmpdir2(), "agentbox-carry-"));
+  const stage = await mkdtemp3(join4(tmpdir3(), "agentbox-carry-"));
   const errors = [];
   const applied = [];
   let copied = 0;
@@ -437,7 +580,7 @@ async function uploadCarryPaths(args) {
       }
     }
   } finally {
-    await rm3(stage, { recursive: true, force: true });
+    await rm4(stage, { recursive: true, force: true });
   }
   return { copied, errors, applied };
 }
@@ -447,9 +590,9 @@ async function uploadOneEntry(args) {
   const boxDest = entry.absDest.startsWith("~/") ? `${BOX_HOME}/${entry.absDest.slice(2)}` : entry.absDest;
   const isDir = entry.kind === "dir";
   const parentDir = isDir ? boxDest : dirnameUnix(boxDest);
-  const localTar = join3(args.stageDir, `carry-${String(args.index)}.tar`);
+  const localTar = join4(args.stageDir, `carry-${String(args.index)}.tar`);
   const tarArgs = isDir ? ["-C", entry.absSrc, "-cf", localTar, "."] : ["-C", dirnameUnix(entry.absSrc), "-cf", localTar, basenameUnix(entry.absSrc)];
-  const packed = await execa2("tar", tarArgs, { reject: false });
+  const packed = await execa3("tar", tarArgs, { reject: false });
   if (packed.exitCode !== 0) {
     throw new Error(`tar pack failed: ${String(packed.stderr).slice(0, 300)}`);
   }
@@ -501,7 +644,7 @@ function shellQuote(s) {
 async function readExposedServicePorts(workspacePath) {
   let text;
   try {
-    text = await readFile2(join4(workspacePath, "agentbox.yaml"), "utf8");
+    text = await readFile2(join5(workspacePath, "agentbox.yaml"), "utf8");
   } catch {
     return [];
   }
@@ -529,17 +672,6 @@ async function readExposedServicePorts(workspacePath) {
 function isPlainObject(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
-function quoteShellArgv(argv) {
-  return argv.map(quoteShellArg).join(" ");
-}
-function quoteShellArg(arg) {
-  if (arg.length === 0) return "''";
-  if (/^[A-Za-z0-9_@%+=:,./-]+$/.test(arg)) return arg;
-  return "'" + arg.replace(/'/g, "'\\''") + "'";
-}
-function bashScript(body) {
-  return `bash -c ${quoteShellArg(body)}`;
-}
 var REMOTE_UP_TAR = "/tmp/agentbox-cp-up.tar.gz";
 var REMOTE_DOWN_TAR = "/tmp/agentbox-cp-down.tar.gz";
 async function uploadToCloudBox(backend, handle, hostSrc, boxDst) {
@@ -557,10 +689,10 @@ async function uploadToCloudBox(backend, handle, hostSrc, boxDst) {
     finalName = posix.basename(boxDst);
   }
   const finalPath = boxParent === "/" ? `/${finalName}` : `${boxParent}/${finalName}`;
-  const stage = await mkdtemp3(hostJoin(tmpdir3(), "agentbox-cp-up-"));
+  const stage = await mkdtemp4(hostJoin(tmpdir4(), "agentbox-cp-up-"));
   const localTar = hostJoin(stage, "payload.tar.gz");
   try {
-    await execa3("tar", ["-C", srcParent, "-czf", localTar, srcBasename], {
+    await execa4("tar", ["-C", srcParent, "-czf", localTar, srcBasename], {
       env: { ...process.env, COPYFILE_DISABLE: "1" }
     });
     await backend.uploadFile(handle, localTar, REMOTE_UP_TAR);
@@ -586,14 +718,14 @@ async function uploadToCloudBox(backend, handle, hostSrc, boxDst) {
       throw new Error(`cloud upload extract failed: ${r.stderr || r.stdout}`);
     }
   } finally {
-    await rm4(stage, { recursive: true, force: true });
+    await rm5(stage, { recursive: true, force: true });
   }
   return { finalPath };
 }
 async function pullCloudDirContents(backend, handle, boxSrcDir, hostDstDir) {
   const dstAbs = hostResolve(hostDstDir);
   mkdirSync(dstAbs, { recursive: true });
-  const stage = await mkdtemp3(hostJoin(tmpdir3(), "agentbox-pull-"));
+  const stage = await mkdtemp4(hostJoin(tmpdir4(), "agentbox-pull-"));
   const localTar = hostJoin(stage, "payload.tar.gz");
   try {
     const packScript = [
@@ -606,11 +738,11 @@ async function pullCloudDirContents(backend, handle, boxSrcDir, hostDstDir) {
       throw new Error(`cloud workspace pack failed: ${r.stderr || r.stdout}`);
     }
     await backend.downloadFile(handle, REMOTE_DOWN_TAR, localTar);
-    await execa3("tar", ["-xzf", localTar, "-C", dstAbs]);
+    await execa4("tar", ["-xzf", localTar, "-C", dstAbs]);
     await backend.exec(handle, `rm -f ${quoteShellArg(REMOTE_DOWN_TAR)}`).catch(() => {
     });
   } finally {
-    await rm4(stage, { recursive: true, force: true });
+    await rm5(stage, { recursive: true, force: true });
   }
   return { finalPath: dstAbs };
 }
@@ -630,7 +762,7 @@ async function downloadFromCloudBox(backend, handle, boxSrc, hostDst) {
   }
   mkdirSync(hostParent, { recursive: true });
   const finalPath = hostJoin(hostParent, finalName);
-  const stage = await mkdtemp3(hostJoin(tmpdir3(), "agentbox-cp-down-"));
+  const stage = await mkdtemp4(hostJoin(tmpdir4(), "agentbox-cp-down-"));
   const localTar = hostJoin(stage, "payload.tar.gz");
   try {
     const packScript = [
@@ -643,14 +775,14 @@ async function downloadFromCloudBox(backend, handle, boxSrc, hostDst) {
       throw new Error(`cloud download pack failed: ${r.stderr || r.stdout}`);
     }
     await backend.downloadFile(handle, REMOTE_DOWN_TAR, localTar);
-    await execa3("tar", ["-xzf", localTar, "-C", hostParent]);
+    await execa4("tar", ["-xzf", localTar, "-C", hostParent]);
     if (finalName !== srcBasename) {
       renameSync(hostJoin(hostParent, srcBasename), finalPath);
     }
     await backend.exec(handle, `rm -f ${quoteShellArg(REMOTE_DOWN_TAR)}`).catch(() => {
     });
   } finally {
-    await rm4(stage, { recursive: true, force: true });
+    await rm5(stage, { recursive: true, force: true });
   }
   return { finalPath };
 }
@@ -785,16 +917,16 @@ var LARGE_BUNDLE_THRESHOLD_BYTES = 20 * 1024 * 1024;
 async function seedFromGitClone(args) {
   const log = args.onLog ?? (() => {
   });
-  const stage = await mkdtemp4(join5(tmpdir4(), "agentbox-clone-"));
-  const cloneDir = join5(stage, "clone");
-  const tarPath = join5(stage, "workspace.tar.gz");
-  const untrackedTarPath = join5(stage, "untracked.tar.gz");
+  const stage = await mkdtemp5(join6(tmpdir5(), "agentbox-clone-"));
+  const cloneDir = join6(stage, "clone");
+  const tarPath = join6(stage, "workspace.tar.gz");
+  const untrackedTarPath = join6(stage, "untracked.tar.gz");
   const stashSha = args.useBranch ? null : await safeStashCreate(args.hostRepo);
   const untrackedSize = args.useBranch ? 0 : await maybeBuildUntrackedTar(args.hostRepo, untrackedTarPath);
   let stashRefCreated = false;
   try {
     if (stashSha) {
-      const ref = await execa4(
+      const ref = await execa5(
         "git",
         ["-C", args.hostRepo, "update-ref", STASH_CARRYOVER_REF, stashSha],
         { reject: false }
@@ -817,8 +949,8 @@ async function seedFromGitClone(args) {
         log(
           `clone tar exceeded ${String(LARGE_BUNDLE_THRESHOLD_BYTES / (1024 * 1024))} MB at depth ${String(DEFAULT_BUNDLE_DEPTH)} (${mb} MB), rebuilding at depth ${String(LARGE_BUNDLE_DEPTH)}`
         );
-        await rm5(cloneDir, { recursive: true, force: true });
-        await rm5(tarPath, { force: true });
+        await rm6(cloneDir, { recursive: true, force: true });
+        await rm6(tarPath, { force: true });
         await runShallowClone(args.hostRepo, cloneDir, LARGE_BUNDLE_DEPTH, stashRefCreated, cloneBranch);
         await tarCloneDir(cloneDir, tarPath);
       }
@@ -869,11 +1001,11 @@ async function seedFromGitClone(args) {
     }
   } finally {
     if (stashRefCreated) {
-      await execa4("git", ["-C", args.hostRepo, "update-ref", "-d", STASH_CARRYOVER_REF], {
+      await execa5("git", ["-C", args.hostRepo, "update-ref", "-d", STASH_CARRYOVER_REF], {
         reject: false
       });
     }
-    await rm5(stage, { recursive: true, force: true });
+    await rm6(stage, { recursive: true, force: true });
   }
 }
 async function runShallowClone(hostRepo, cloneDir, depth, includeStashRef, fromBranch) {
@@ -881,7 +1013,7 @@ async function runShallowClone(hostRepo, cloneDir, depth, includeStashRef, fromB
   if (depth !== null) cloneArgs.push(`--depth=${String(depth)}`);
   if (fromBranch) cloneArgs.push("--branch", fromBranch);
   cloneArgs.push(`file://${hostRepo}`, cloneDir);
-  await execa4("git", cloneArgs);
+  await execa5("git", cloneArgs);
   if (includeStashRef) {
     const fetchArgs = ["-C", cloneDir, "fetch", "--quiet"];
     if (depth !== null) fetchArgs.push(`--depth=${String(depth)}`);
@@ -889,11 +1021,11 @@ async function runShallowClone(hostRepo, cloneDir, depth, includeStashRef, fromB
       `file://${hostRepo}`,
       `+${STASH_CARRYOVER_REF}:refs/remotes/origin/agentbox-carryover/stash`
     );
-    await execa4("git", fetchArgs, { reject: false });
+    await execa5("git", fetchArgs, { reject: false });
   }
 }
 async function tarCloneDir(cloneDir, outPath) {
-  await execa4("tar", ["-C", cloneDir, "-czf", outPath, "."], {
+  await execa5("tar", ["-C", cloneDir, "-czf", outPath, "."], {
     env: { ...process.env, COPYFILE_DISABLE: "1" }
   });
 }
@@ -905,19 +1037,19 @@ async function safeFileSize(path) {
   }
 }
 async function safeStashCreate(hostRepo) {
-  const r = await execa4("git", ["-C", hostRepo, "stash", "create"], { reject: false });
+  const r = await execa5("git", ["-C", hostRepo, "stash", "create"], { reject: false });
   if (r.exitCode !== 0) return null;
   const sha = r.stdout.trim();
   return sha.length > 0 ? sha : null;
 }
 async function maybeBuildUntrackedTar(hostRepo, outPath) {
-  const list = await execa4(
+  const list = await execa5(
     "git",
     ["-C", hostRepo, "ls-files", "--others", "--exclude-standard", "-z"],
     { reject: false }
   );
   if (list.exitCode !== 0 || list.stdout.length === 0) return 0;
-  const tar = await execa4(
+  const tar = await execa5(
     "tar",
     ["-C", hostRepo, "--null", "-T", "-", "-czf", outPath],
     {
@@ -936,16 +1068,16 @@ async function maybeBuildUntrackedTar(hostRepo, outPath) {
   }
 }
 async function readOriginUrl(hostRepo) {
-  const r = await execa4("git", ["-C", hostRepo, "remote", "get-url", "origin"], { reject: false });
+  const r = await execa5("git", ["-C", hostRepo, "remote", "get-url", "origin"], { reject: false });
   if (r.exitCode !== 0) return null;
   const out = (r.stdout ?? "").trim();
   return out.length > 0 ? out : null;
 }
 async function seedFromTar(args) {
-  const stage = await mkdtemp4(join5(tmpdir4(), "agentbox-tar-"));
-  const tarPath = join5(stage, "workspace.tar.gz");
+  const stage = await mkdtemp5(join6(tmpdir5(), "agentbox-tar-"));
+  const tarPath = join6(stage, "workspace.tar.gz");
   try {
-    await execa4("tar", ["-C", args.hostDir, "-czf", tarPath, "."]);
+    await execa5("tar", ["-C", args.hostDir, "-czf", tarPath, "."]);
     const remoteTar = "/tmp/agentbox-workspace.tar.gz";
     await args.backend.uploadFile(args.handle, tarPath, remoteTar);
     const SUDO = `if command -v sudo >/dev/null 2>&1; then SUDO='sudo -n'; else SUDO=''; fi`;
@@ -969,7 +1101,7 @@ async function seedFromTar(args) {
       throw new Error(`workspace seed (tar) failed: ${r.stderr || r.stdout}`);
     }
   } finally {
-    await rm5(stage, { recursive: true, force: true });
+    await rm6(stage, { recursive: true, force: true });
   }
 }
 var CLOUD_WORKSPACE_DIR = "/workspace";
@@ -1220,17 +1352,25 @@ function createCloudProvider(backend, opts = {}) {
       const timeoutMs = typeof timeoutOverride === "number" && timeoutOverride > 0 ? timeoutOverride : void 0;
       const networkPolicyOpt = req.providerOptions?.["networkPolicy"];
       const networkPolicy = typeof networkPolicyOpt === "string" && networkPolicyOpt.trim() !== "" ? networkPolicyOpt.trim() : void 0;
+      const sizeOpt = req.providerOptions?.["size"];
+      const size = typeof sizeOpt === "string" && sizeOpt.trim() !== "" ? sizeOpt.trim() : void 0;
       const relayToken = generateRelayToken();
       const bridgeToken = generateRelayToken();
       try {
         await ensureRelay({ onLog: log });
       } catch (err) {
-        log(`relay ensure failed (continuing): ${err instanceof Error ? err.message : String(err)}`);
+        log(
+          `relay ensure failed (continuing): ${err instanceof Error ? err.message : String(err)}`
+        );
       }
       let snapshotName;
       let resolvedCheckpointRef;
       if (req.checkpointRef && req.projectRoot) {
-        const found = await resolveCloudCheckpoint(req.projectRoot, backend.name, req.checkpointRef);
+        const found = await resolveCloudCheckpoint(
+          req.projectRoot,
+          backend.name,
+          req.checkpointRef
+        );
         if (found) {
           snapshotName = found.manifest.snapshotName;
           resolvedCheckpointRef = found.name;
@@ -1264,6 +1404,7 @@ function createCloudProvider(backend, opts = {}) {
           image,
           snapshot,
           resources,
+          size,
           timeoutMs,
           exposePorts: exposeServicePorts,
           networkPolicy,
@@ -1317,6 +1458,8 @@ function createCloudProvider(backend, opts = {}) {
           });
         }
         await seedOpencodeModelState(backend, handle, { onLog: log });
+        await seedDynamicConfig(backend, handle, { workspacePath: req.workspacePath, onLog: log });
+        await seedGitIdentity(backend, handle, { hostRepo: req.workspacePath, onLog: log });
         if (req.envFilesToImport && req.envFilesToImport.length > 0) {
           const { copied } = await uploadEnvFiles({
             backend,
@@ -1358,9 +1501,12 @@ function createCloudProvider(backend, opts = {}) {
           log("launching in-box dockerd");
           try {
             const dockerd = await launchCloudDockerdDaemon({ backend, handle, timeoutMs: 6e4 });
-            if (!dockerd.up) log(`dockerd did not become ready (continuing): ${dockerd.reason ?? "unknown"}`);
+            if (!dockerd.up)
+              log(`dockerd did not become ready (continuing): ${dockerd.reason ?? "unknown"}`);
           } catch (err) {
-            log(`dockerd daemon launch failed (continuing): ${err instanceof Error ? err.message : String(err)}`);
+            log(
+              `dockerd daemon launch failed (continuing): ${err instanceof Error ? err.message : String(err)}`
+            );
           }
         }
         const vncEnabled = req.vnc?.enabled !== false;
@@ -1719,7 +1865,10 @@ function makeCloudCheckpoint(backend) {
       const info = await writeCloudCheckpointManifest(box.projectRoot, backend.name, name, {
         snapshotName,
         sourceBoxId: box.id,
-        sourceBoxName: box.name
+        sourceBoxName: box.name,
+        baseProvider: backend.name,
+        baseFingerprint: currentCloudBaseFingerprint(backend.name),
+        cliVersion: readCliStamp().cliVersion
       });
       return { ref: info.name };
     },
@@ -1797,11 +1946,13 @@ export {
   seedAgentVolumesIfFresh,
   agentSpecsForCloud,
   listCloudCheckpoints,
+  listAllCloudCheckpoints,
   resolveCloudCheckpoint,
   writeCloudCheckpointManifest,
+  currentCloudBaseFingerprint,
   removeCloudCheckpointDir,
   probeCloudCheckpoint,
   createCloudProvider,
   renderInnerCommand
 };
-//# sourceMappingURL=chunk-MXXXKJYS.js.map
+//# sourceMappingURL=chunk-4NQXNQ53.js.map