@madarco/agentbox 0.13.0 → 0.15.0

package/CHANGELOG.md

@@ -9,6 +9,131 @@ Entries are generated from the commit history with `/release-notes` and then
 hand-reviewed — they describe what changed for someone using the `agentbox`
 CLI, not the raw commits.
 
+## [0.15.0] - 2026-06-05
+
+### Breaking
+
+- Carry and `cp` now share a single size cap. The `AGENTBOX_CARRY_MAX_BYTES`
+  env var is removed; both the `carry:` step and `agentbox cp` are governed by
+  the `box.cpMaxBytes` config key (default 100 MiB, up from carry's old 50 MiB).
+  Scripts that set `AGENTBOX_CARRY_MAX_BYTES` no longer have any effect — set
+  `box.cpMaxBytes` instead.
+
+### Added
+
+- `queue.openIn` config key: when a background `-i` job's box becomes ready,
+  optionally open an attached terminal onto it — `split`, `window`, or `tab`
+  (default `none`, the previous behavior). Fires only when you submit from
+  inside tmux, cmux, or iTerm2.
+- `agentbox cp` (and the `carry:` copy step) now stream the tar instead of
+  buffering it, so copies are no longer capped by Node's buffer limit (large
+  folders that silently failed with "tar: Write error" now work). Added a
+  repeatable `--exclude=<glob|name>` and `--no-default-excludes`; heavy
+  regenerable dirs (`.git`, `node_modules`, `dist`, `.next`, `target`, …) are
+  excluded by default. Copies larger than `box.cpMaxBytes` are blocked with a
+  du-style tree of the biggest folders and a suggested strategy unless `--yes`.
+- `agentbox agent approvals` / `agentbox agent approve`: inspect and answer
+  relay host-action confirmations (git push, `cp`, `gh` PR writes, checkpoint)
+  from a host orchestrator, instead of hand-curling the loopback endpoint.
+  Prompt ids are content-derived, so a prompt that changed since you listed it
+  is refused rather than mis-answered. Adds an opt-in per-box
+  `box.autoApproveHostActions` (default off, audited) for unattended runs.
+- The attach footer's `(...)` slot now shows aggregate box service status —
+  `starting N/M…` while services boot, `service error` on a crash/failed task,
+  `ready` once all are up (probe-aware: a `ready_when` service counts as up only
+  once its probe passes, so the footer no longer flashes `ready` early). Boxes
+  with no services fall back to the agent activity label.
+
+### Changed
+
+- `queue.openIn` under cmux: `split` and `tab` queued jobs now open in the
+  workspace you submitted from (split targets the original pane, falling back to
+  the parent workspace) instead of always spawning a new top-level workspace.
+  `window` still opens a separate workspace.
+- `agentbox config set queue.openIn` now warns that the feature only fires
+  inside tmux/cmux/iTerm2, and that cmux additionally needs `socketControlMode`
+  set to `automation`/`password` plus `cmux reload-config`.
+
+### Fixed
+
+- The `carry:` block is now documented in the published `agentbox.yaml` JSON
+  schema, so editors and in-box agents that fetch the schema no longer see it as
+  invalid or undiscoverable.
+- The stale default-checkpoint recreate prompt now fires for already-configured
+  projects too (it was skipped for them, silently booting old base layers), and
+  on recreate it reuses the existing `agentbox.yaml` instead of telling the agent
+  to regenerate a config that already exists.
+- `agentbox cp` now enforces `box.cpMaxBytes` on single-file uploads, not just
+  directories.
+- A supervisor screen-scrape safety net flips a stuck Claude `working` state to
+  `waiting` when its hooks miss a prompt (MCP dialogs, dropped notifications), so
+  `agent wait-for input-needed` reliably wakes.
+
+## [0.14.0] - 2026-06-04
+
+### Added
+
+- E2B as a fifth provider (`--provider e2b`): a Firecracker microVM per box with
+  public HTTPS preview URLs and free pause/resume. Unlike the other clouds, E2B
+  builds its base image directly from a Dockerfile — `agentbox prepare --provider
+  e2b` drives the build. Full lifecycle is supported: `agentbox e2b login`,
+  create, attach (`shell` / `claude` / `codex` / `opencode`), checkpoints, VNC,
+  and `agentbox prune --provider e2b`.
+- `agentbox agent wait-for input-needed` — a single state that fires whenever the
+  agent needs you: the turn finished and the prompt is ready, or it's blocked on a
+  question, plan approval, permission prompt, or error. Replaces racing separate
+  `wait-for` calls that each hang to timeout, and prints the concrete state it
+  matched so callers can branch on why it woke.
+- Cloud `<provider> login` now nudges you to run `agentbox prepare` when no base
+  has been baked, and `create` detects a stale cloud base (by content checksum)
+  and folds a rebuild prompt into the existing recreate wizard. Non-interactive
+  runs (`-y` / no TTY) warn and boot on the existing base rather than auto-baking.
+
+### Changed
+
+- Cloud provider docs lead with how to use each provider, and the recommended
+  setup is the one-flow `agentbox install` wizard (login + base bake in one step).
+- `create` / `claude` / `codex` / `opencode` no longer print the `log: <path>`
+  startup line; logs are still written and `~/.agentbox/logs/latest.log` still
+  tracks the latest run.
+- Cloud attach shows a "starting <agent>" banner so a freshly attached cold cloud
+  box is never blank during cold-start, and credential seeding no longer corrupts
+  the create spinner.
+
+### Fixed
+
+- Parallel boxes are now reliable: `~/.agentbox/state.json` is written atomically
+  under a cross-process lock, so concurrent `create` / `destroy` (the `-i` use
+  case) no longer lose records, wedge the queue counter, or leave boxes missing
+  from `agentbox list`. Concurrent creates get distinct project indices, and a
+  box is recorded as soon as its container starts so a mid-create failure is still
+  resolvable by `destroy` / `prune`.
+- A box created from a checkpoint now gets a fresh per-box git branch and worktree
+  — previously all boxes from one checkpoint shared a branch and their `.git`
+  broke once the source box was destroyed (no diff, commit, or `/review`).
+- `agentbox shell <box> -- <argv>` passes the post-`--` arguments verbatim instead
+  of re-parsing them through `bash -c`, fixing corrupted redirects and quoting
+  (e.g. `curl -w '%{http_code}'`). One-shot `shell -- cmd` against a cloud box no
+  longer hangs.
+- Docker-based services in `agentbox.yaml` no longer race a not-yet-ready docker
+  socket: dockerd is launched and awaited before the in-box supervisor on every
+  create/restart across all DinD providers.
+- Cloud boxes are seeded with working agent credentials and onboarding state, so a
+  fresh box lands at a ready prompt instead of a 401, a bypass-permissions accept
+  screen, or the first-run theme picker. Credential seeding is best-effort and
+  refreshes from the host before each create.
+- A working box is no longer auto-paused (autopause now considers codex/opencode,
+  not just claude), and `agentbox drive` auto-unpauses a paused box before
+  attaching.
+- Chromium is resolved lazily and shared with the project's own Playwright build,
+  fixing browser launches that hung waiting on a stale baked-in binary; the base
+  image is also smaller.
+- Resync only flags an untracked-file conflict when the box and host content
+  actually differ, so byte-identical files no longer needlessly skip
+  `agentbox.yaml` services.
+- A missing cloud base (skipped `agentbox prepare`) now reports a one-line
+  actionable error instead of a full stack trace.
+
 ## [0.13.0] - 2026-06-02
 
 ### Added

package/README.md

@@ -6,6 +6,8 @@
 </h1>
 
 Run multiple agents in parallel, with a single command, on your PC, self-hosted, or in the cloud
+
+Works with [iterm2](https://agent-box.sh/docs/integrations-iterm2) - [cmux](https://agent-box.sh/docs/integrations-cmux) - [tmux](https://agent-box.sh/docs/integrations-tmux)
 <br>
 
 <p align="center">
@@ -79,12 +81,12 @@ Uses `portless` to give box web apps the same URL from inside the box and on the
 
 ## Cloud Providers
 
-|                     | local docker              | hetzner                | daytona            | vercel            |
-| ------------------- | ------------------------- | ---------------------- | ------------------ | ------------------ |
-| Support             | ✅                        | ✅                     | ⚠️ Partial         | ✅                 |
-| Base image          | Dockerfile                | Setup script (Ubuntu)  | Dockerfile         | Setup script       |
-| Live snapshots      | ✅                        | ✅                     | 🧪 Experimental    | ✅                 |
-| Private preview URLs| ✅ (portless or OrbStack) | ✅ (portless)          | ✅ (native)        | ✅ (native)        |
+|                     | local docker              | hetzner                | daytona            | vercel             | e2b                |
+| ------------------- | ------------------------- | ---------------------- | ------------------ | ------------------ | ------------------ |
+| Support             | ✅                        | ✅                     | ⚠️ Partial         | ✅                 | ✅                 |
+| Base image          | Dockerfile                | Setup script (Ubuntu)  | Dockerfile         | Setup script       | Dockerfile (`Template.build`) |
+| Live snapshots      | ✅                        | ✅                     | 🧪 Experimental    | ✅                 | ✅                 |
+| Private preview URLs| ✅ (portless or OrbStack) | ✅ (portless)          | ✅ (native)        | ✅ (native)        | ✅ (native)        |
 
 **Cloud setup** (optional — skip for local Docker)
 
@@ -92,7 +94,8 @@ Uses `portless` to give box web apps the same URL from inside the box and on the
 - `agentbox vercel login` — interactive Vercel Sandbox token setup, saved to `~/.agentbox/secrets.env`
 - `agentbox hetzner login` — interactive Hetzner Cloud token setup, saved to `~/.agentbox/secrets.env`
 - `agentbox daytona login` — interactive Daytona API key setup, saved to `~/.agentbox/secrets.env`
-- `agentbox prepare [--provider daytona|hetzner]` — build the image and initial snapshot
+- `agentbox e2b login` — interactive E2B API key setup, saved to `~/.agentbox/secrets.env`
+- `agentbox prepare [--provider daytona|hetzner|vercel|e2b]` — build the image and initial snapshot (e2b builds from a Dockerfile via `Template.build()`)
 - `agentbox hetzner claude`, `agentbox hetzner codex`, `agentbox hetzner create`, etc.
 
 ## How to use
@@ -150,7 +153,7 @@ Full documentation lives at **[agent-box.sh/docs](https://agent-box.sh/docs)**:
 - [Quickstart](https://agent-box.sh/docs) and [Core concepts](https://agent-box.sh/docs/core-concepts)
 - [Teleport a project](https://agent-box.sh/docs/teleport-a-project), [Run an agent](https://agent-box.sh/docs/run-an-agent), [Access your box](https://agent-box.sh/docs/access-your-box)
 - [Configuration](https://agent-box.sh/docs/configuration), [Services & tasks](https://agent-box.sh/docs/services-and-tasks), [Sync & git](https://agent-box.sh/docs/sync-and-git)
-- Cloud providers: [Hetzner](https://agent-box.sh/docs/hetzner), [Daytona](https://agent-box.sh/docs/daytona), [Vercel](https://agent-box.sh/docs/vercel)
+- Cloud providers: [Hetzner](https://agent-box.sh/docs/hetzner), [Daytona](https://agent-box.sh/docs/daytona), [Vercel](https://agent-box.sh/docs/vercel), [E2B](https://agent-box.sh/docs/e2b)
 - Full [CLI reference](https://agent-box.sh/docs/cli)
 
 ## Development

package/dist/{_cloud-attach-HJC672UR.js → _cloud-attach-R6TRWG5L.js}

@@ -3,13 +3,13 @@ import {
   buildCloudAttachInnerCommand,
   cloudAgentAttach,
   cloudAgentStartDetached
-} from "./chunk-QYRK5H6Q.js";
-import "./chunk-B4QG2MCW.js";
-import "./chunk-SNTHHWKY.js";
+} from "./chunk-43Q5GWP6.js";
+import "./chunk-MLMFNN4T.js";
+import "./chunk-XKH7NTT7.js";
 import "./chunk-G3H2L3O2.js";
 export {
   buildCloudAttachInnerCommand,
   cloudAgentAttach,
   cloudAgentStartDetached
 };
-//# sourceMappingURL=_cloud-attach-HJC672UR.js.map
+//# sourceMappingURL=_cloud-attach-R6TRWG5L.js.map

package/dist/{chunk-QYRK5H6Q.js → chunk-43Q5GWP6.js}

@@ -3,7 +3,7 @@ import {
   DEFAULT_RELAY_PORT,
   loadEffectiveConfig,
   readBoxStatus
-} from "./chunk-B4QG2MCW.js";
+} from "./chunk-MLMFNN4T.js";
 
 // src/commands/_cloud-attach.ts
 import { spawn as spawn4 } from "child_process";
@@ -13,31 +13,36 @@ import { join as join2 } from "path";
 import { spinner } from "@clack/prompts";
 
 // src/provider/registry.ts
-var KNOWN = ["docker", "daytona", "hetzner", "vercel"];
+var KNOWN = ["docker", "daytona", "hetzner", "vercel", "e2b"];
 function isKnownProvider(name) {
   return KNOWN.includes(name);
 }
 async function getProvider(name) {
   switch (name) {
     case "docker": {
-      const mod = await import("./dist-OG6NW6SM.js");
+      const mod = await import("./dist-OGJGZETZ.js");
       return mod.dockerProvider;
     }
     case "daytona": {
-      const mod = await import("./dist-OPIBZ7XM.js");
+      const mod = await import("./dist-FIFEFKJ7.js");
       await mod.ensureDaytonaCredentials();
       return mod.daytonaProvider;
     }
     case "hetzner": {
-      const mod = await import("./dist-7KVUIKJX.js");
+      const mod = await import("./dist-AGTIA7AD.js");
       await mod.ensureHetznerCredentials();
       return mod.hetznerProvider;
     }
     case "vercel": {
-      const mod = await import("./dist-JAN5VABY.js");
+      const mod = await import("./dist-S4XR4ACV.js");
       await mod.ensureVercelCredentials();
       return mod.vercelProvider;
     }
+    case "e2b": {
+      const mod = await import("./dist-JZ3XO6EB.js");
+      await mod.ensureE2bCredentials();
+      return mod.e2bProvider;
+    }
     default:
       throw new Error(`unknown sandbox provider: ${String(name)}`);
   }
@@ -59,6 +64,24 @@ async function providerForCreate(choice) {
 // src/wrapped-pty/run.ts
 import { spawn as spawn3, spawnSync as spawnSync2 } from "child_process";
 
+// src/wrapped-pty/service-status.ts
+function serviceStatusLabel(status) {
+  if (!status) return null;
+  const services = status.services ?? [];
+  const tasks = status.tasks ?? [];
+  if (services.length === 0 && tasks.length === 0) return null;
+  const errored = services.some((s) => s.state === "crashed" || s.state === "unhealthy" || s.state === "backoff") || tasks.some((t) => t.state === "failed");
+  if (errored) return "service error";
+  const isUp = (s) => s.state === "ready" || s.state === "running" && !s.probed;
+  const counted = services.filter((s) => s.state !== "stopped");
+  const total = counted.length;
+  const up = counted.filter(isUp).length;
+  const settling = services.some((s) => s.state === "pending" || s.state === "waiting" || s.state === "starting") || services.some((s) => s.state === "running" && Boolean(s.probed)) || tasks.some((t) => t.state === "pending" || t.state === "waiting" || t.state === "running");
+  if (total === 0) return settling ? "starting\u2026" : null;
+  if (settling || up < total) return `starting ${String(up)}/${String(total)}\u2026`;
+  return "ready";
+}
+
 // src/pty/pty-backend.ts
 async function loadPtyBackend() {
   try {
@@ -110,16 +133,17 @@ async function spawnInNewTerminal(args) {
 }
 async function spawnInTmux(args) {
   const cmdStr = shellJoin(args.argv);
+  const target = args.tmuxTarget ? ["-t", args.tmuxTarget] : [];
   let tmuxArgv;
   let noteKind;
   if (args.mode === "split") {
-    tmuxArgv = ["split-window", "-h", "-c", args.cwd, "--", cmdStr];
+    tmuxArgv = ["split-window", "-h", ...target, "-c", args.cwd, "--", cmdStr];
     noteKind = "tmux split";
   } else {
-    tmuxArgv = ["new-window", "-n", args.title, "-c", args.cwd, "--", cmdStr];
+    tmuxArgv = ["new-window", ...target, "-n", args.title, "-c", args.cwd, "--", cmdStr];
     noteKind = "tmux window";
   }
-  const r = await runQuiet("tmux", tmuxArgv);
+  const r = await runQuiet("tmux", tmuxArgv, args.env);
   if (r.code !== 0) {
     return {
       launched: false,
@@ -133,9 +157,54 @@ async function spawnInTmux(args) {
   };
 }
 async function spawnInCmux(args) {
-  const bin = cmuxBinary();
-  if (args.mode === "window") {
-    const r = await runQuiet(bin, [
+  const bin = cmuxBinary(args.env);
+  if (args.mode === "window") return newCmuxWorkspace(bin, args);
+  const base = args.mode === "split" ? ["new-split", "right"] : ["new-surface"];
+  const noteKind = args.mode === "split" ? "cmux split" : "cmux tab";
+  const attempts = [];
+  if (args.mode === "split" && args.cmuxTargetSurface) {
+    attempts.push([...base, "--surface", args.cmuxTargetSurface, "--focus", "true"]);
+  }
+  if (args.cmuxTargetWorkspace) {
+    attempts.push([...base, "--workspace", args.cmuxTargetWorkspace, "--focus", "true"]);
+  }
+  if (!args.cmuxWorkspaceFallback) {
+    attempts.push([...base, "--focus", "true"]);
+  }
+  const cmdLine = `cd ${shellQuote(args.cwd)} && exec ${shellJoin(args.argv)}`;
+  let lastError = "";
+  for (const createArgv of attempts) {
+    const created = await runQuiet(bin, createArgv, args.env);
+    if (created.code !== 0) {
+      lastError = `cmux ${createArgv.join(" ")} exited ${String(created.code)}: ${created.stderr.trim()}`;
+      continue;
+    }
+    const surfaceRef = parseCmuxRef(created.stdout);
+    if (!surfaceRef) {
+      return {
+        launched: false,
+        note: "",
+        error: `cmux ${createArgv[0]} gave no surface ref: ${created.stdout.trim()}`
+      };
+    }
+    const sent = await runQuiet(bin, ["send", "--surface", surfaceRef, `${cmdLine}
+`], args.env);
+    if (sent.code !== 0) {
+      return {
+        launched: false,
+        note: "",
+        error: `cmux send exited ${String(sent.code)}: ${sent.stderr.trim()}`
+      };
+    }
+    return { launched: true, note: `Attached in new ${noteKind}.` };
+  }
+  if (args.cmuxWorkspaceFallback) return newCmuxWorkspace(bin, args);
+  return { launched: false, note: "", error: lastError };
+}
+async function newCmuxWorkspace(bin, args) {
+  const r = await runQuiet(
+    bin,
+    [
       "new-workspace",
       "--name",
       args.title,
@@ -145,45 +214,17 @@ async function spawnInCmux(args) {
       shellJoin(args.argv),
       "--focus",
       "true"
-    ]);
-    if (r.code !== 0) {
-      return {
-        launched: false,
-        note: "",
-        error: `cmux new-workspace exited ${String(r.code)}: ${r.stderr.trim()}`
-      };
-    }
-    return { launched: true, note: "Attached in new cmux workspace." };
-  }
-  const createArgv = args.mode === "split" ? ["new-split", "right", "--focus", "true"] : ["new-surface", "--focus", "true"];
-  const noteKind = args.mode === "split" ? "cmux split" : "cmux tab";
-  const created = await runQuiet(bin, createArgv);
-  if (created.code !== 0) {
-    return {
-      launched: false,
-      note: "",
-      error: `cmux ${createArgv[0]} exited ${String(created.code)}: ${created.stderr.trim()}`
-    };
-  }
-  const surfaceRef = parseCmuxRef(created.stdout);
-  if (!surfaceRef) {
-    return {
-      launched: false,
-      note: "",
-      error: `cmux ${createArgv[0]} gave no surface ref: ${created.stdout.trim()}`
-    };
-  }
-  const cmdLine = `cd ${shellQuote(args.cwd)} && exec ${shellJoin(args.argv)}`;
-  const sent = await runQuiet(bin, ["send", "--surface", surfaceRef, `${cmdLine}
-`]);
-  if (sent.code !== 0) {
+    ],
+    args.env
+  );
+  if (r.code !== 0) {
     return {
       launched: false,
       note: "",
-      error: `cmux send exited ${String(sent.code)}: ${sent.stderr.trim()}`
+      error: `cmux new-workspace exited ${String(r.code)}: ${r.stderr.trim()}`
     };
   }
-  return { launched: true, note: `Attached in new ${noteKind}.` };
+  return { launched: true, note: "Attached in new cmux workspace." };
 }
 function parseCmuxRef(stdout) {
   const m = stdout.match(/\b(?:surface|pane):\d+\b/);
@@ -237,9 +278,9 @@ async function spawnInITerm2(args) {
     note: `Attached in new ${noteKind}.`
   };
 }
-function runQuiet(cmd, argv) {
+function runQuiet(cmd, argv, env) {
   return new Promise((resolve) => {
-    const child = spawn(cmd, argv, { stdio: ["ignore", "pipe", "pipe"] });
+    const child = spawn(cmd, argv, { stdio: ["ignore", "pipe", "pipe"], env });
     let stdout = "";
     let stderr = "";
     child.stdout?.on("data", (chunk) => {
@@ -956,7 +997,8 @@ function renderFooter(state, cols) {
     };
     const isClaude = state.mode === "claude";
     const detachable = state.detachable ?? isClaude;
-    const stateLabel = isClaude ? void 0 : state.mode === "shell" ? "shell" : state.mode;
+    const modeLabel = isClaude ? void 0 : state.mode === "shell" ? "shell" : state.mode;
+    const stateLabel = state.boxServiceStatus ?? modeLabel;
     if (state.leaderActive) {
       const leaderHints = detachable ? DETACHABLE_LEADER_HINTS : PLAIN_LEADER_HINTS;
       return statusLine(sidebarBox, cols, stateLabel, leaderHints);
@@ -1318,11 +1360,12 @@ async function runWrappedAttach(opts) {
   setTerminalTitle(lastEmittedTitle);
   const detachable = opts.detachable ?? opts.mode === "claude";
   let leaderActive = false;
-  const buildIdle = (sessionTitle, claudeActivity) => ({
+  const buildIdle = (sessionTitle, claudeActivity, boxServiceStatus) => ({
     kind: "idle",
     boxName: opts.boxName,
     sessionTitle,
     claudeActivity,
+    boxServiceStatus,
     mode: opts.mode,
     detachable,
     leaderActive
@@ -1330,6 +1373,7 @@ async function runWrappedAttach(opts) {
   let footerState = buildIdle();
   let lastSessionTitle;
   let lastActivity;
+  let lastServiceStatus;
   let capturingPrompt = null;
   let activeNotice = null;
   let reconnectBanner = null;
@@ -1377,7 +1421,7 @@ async function runWrappedAttach(opts) {
     } else if (flashMessage) {
       footerState = { kind: "flash", message: flashMessage };
     } else {
-      footerState = buildIdle(lastSessionTitle, lastActivity);
+      footerState = buildIdle(lastSessionTitle, lastActivity, lastServiceStatus);
     }
   };
   const recomputeBand = () => {
@@ -1645,6 +1689,7 @@ async function runWrappedAttach(opts) {
       const body = opts.mode === "codex" ? status?.codex : opts.mode === "opencode" ? status?.opencode : opts.mode === "shell" ? void 0 : status?.claude;
       const nextTitle = body?.sessionTitle?.trim() || void 0;
       const nextActivity = body?.state || void 0;
+      const nextServiceStatus = serviceStatusLabel(status) ?? void 0;
       if (cmuxOn && nextActivity !== lastActivity) {
         applyCmuxAgentState(opts.mode, nextActivity);
         if (isAttentionState(nextActivity) && !isAttentionState(lastActivity)) {
@@ -1662,9 +1707,11 @@ async function runWrappedAttach(opts) {
         questionPayload = nextQuestion;
         applyBandChange();
       }
-      if (nextTitle === lastSessionTitle && nextActivity === lastActivity) return;
+      if (nextTitle === lastSessionTitle && nextActivity === lastActivity && nextServiceStatus === lastServiceStatus)
+        return;
       lastSessionTitle = nextTitle;
       lastActivity = nextActivity;
+      lastServiceStatus = nextServiceStatus;
       if (footerState.kind === "idle") {
         recomputeFooter();
         redrawChrome();
@@ -1962,12 +2009,15 @@ function abortableSleep(ms, signal) {
     );
   });
 }
+function agentStartBanner(binary) {
+  return `printf "  agentbox: starting ${binary} (first paint may take a few seconds)...\\r\\n"; `;
+}
 function buildCloudAttachInnerCommand(binary, extraArgs) {
   if (!extraArgs || extraArgs.length === 0) {
-    return `bash -lc exec\\ ${binary}`;
+    return `bash -lc '${agentStartBanner(binary)}exec ${binary}'`;
   }
   const blob = Buffer.from(extraArgs.join("\n"), "utf8").toString("base64");
-  return `bash -lc 'mapfile -t A <<< "$(echo ${blob} | base64 -d)"; exec ${binary} "\${A[@]}"'`;
+  return `bash -lc '${agentStartBanner(binary)}mapfile -t A <<< "$(echo ${blob} | base64 -d)"; exec ${binary} "\${A[@]}"'`;
 }
 async function cloudAgentAttach(args) {
   const provider = await providerForBox(args.box);
@@ -2095,8 +2145,10 @@ export {
   getProvider,
   providerForBox,
   providerForCreate,
-  loadPtyBackend,
   detectHostTerminal,
+  cmuxBinary,
+  spawnInNewTerminal,
+  loadPtyBackend,
   setTerminalTitle,
   pushTerminalTitle,
   popTerminalTitle,
@@ -2121,4 +2173,4 @@ export {
   cloudAgentAttach,
   cloudAgentStartDetached
 };
-//# sourceMappingURL=chunk-QYRK5H6Q.js.map
+//# sourceMappingURL=chunk-43Q5GWP6.js.map