@madarco/agentbox 0.5.0 → 0.6.0

package/dist/index.js

@@ -1,7 +1,9 @@
 #!/usr/bin/env node
 import {
-  createBox
-} from "./chunk-6VTAPD4H.js";
+  createBox,
+  hostBackupHasCredentials,
+  syncClaudeCredentials
+} from "./chunk-KJNZP6I3.js";
 import {
   AmbiguousBoxError,
   BoxNotFoundError,
@@ -15,16 +17,18 @@ import {
   startBox,
   stopBox,
   unpauseBox
-} from "./chunk-FJNIFTWK.js";
+} from "./chunk-M7I247BK.js";
 import {
   ClaudeSessionError,
   DEFAULT_RELAY_PORT,
   SHARED_CLAUDE_VOLUME,
   buildClaudeAttachArgv,
   buildClaudeDashboardAttachArgv,
+  buildClaudeLoginRunArgv,
   buildShellArgv,
   buildVncUrls,
   claudeSessionInfo,
+  clearRelayNotice,
   containerHex,
   ensureAgentboxTasksFile,
   ensureClaudeVolume,
@@ -38,10 +42,13 @@ import {
   renderStatusTable,
   renderTaskTable,
   resolveClaudeVolume,
+  runInteractiveClaudeLogin,
   seedSetupSkillIntoVolume,
+  setRelayNotice,
   startClaudeSession,
-  stopRelay
-} from "./chunk-PXUBE5KS.js";
+  stopRelay,
+  warmUpClaudeCredentials
+} from "./chunk-HTTKML3C.js";
 import {
   STATE_DIR,
   readState,
@@ -52,7 +59,7 @@ import {
   allCheckpointImagesBytes,
   boxResourceStats,
   projectCheckpointImageBytes
-} from "./chunk-7J5AJLWG.js";
+} from "./chunk-BBZMA2K6.js";
 import {
   DEFAULT_BOX_IMAGE,
   DEFAULT_ENV_PATTERNS,
@@ -62,6 +69,7 @@ import {
   configPathFor,
   createCheckpoint,
   detectEngine,
+  ensureImage,
   execInBox,
   findProjectRoot,
   listCheckpoints,
@@ -78,7 +86,7 @@ import {
   setConfigValue,
   setEngineOverride,
   unsetConfigValue
-} from "./chunk-RFC5F5HR.js";
+} from "./chunk-HHMWQNLF.js";
 
 // src/index.ts
 import { Command as Command29 } from "commander";
@@ -302,13 +310,12 @@ var browserCommand = new Command("browser").description(
 });
 
 // src/commands/claude.ts
-import { confirm as confirm2, intro, isCancel as isCancel2, log as log5, outro, password, spinner } from "@clack/prompts";
+import { confirm as confirm2, intro, isCancel as isCancel2, log as log5, outro, spinner } from "@clack/prompts";
 import { Command as Command2 } from "commander";
 
 // src/auth.ts
-import { spawnSync as spawnSync2 } from "child_process";
-import { mkdir, readFile, writeFile } from "fs/promises";
-import { dirname, join } from "path";
+import { readFile } from "fs/promises";
+import { join } from "path";
 var AUTH_FILE = join(STATE_DIR, "auth.json");
 async function resolveClaudeAuth(processEnv, opts = {}) {
   const env = {};
@@ -340,22 +347,6 @@ async function readAuthFile(path2 = AUTH_FILE) {
     return {};
   }
 }
-async function writeAuthFile(next, path2 = AUTH_FILE) {
-  await mkdir(dirname(path2), { recursive: true });
-  await writeFile(path2, JSON.stringify(next, null, 2) + "\n", { mode: 384, flag: "w" });
-}
-function hostClaudeAvailable() {
-  const r = spawnSync2("which", ["claude"], { stdio: ["ignore", "pipe", "ignore"] });
-  return r.status === 0 && (r.stdout?.toString().trim().length ?? 0) > 0;
-}
-function runHostSetupToken() {
-  const child = spawnSync2("claude", ["setup-token"], { stdio: "inherit" });
-  return { exitCode: child.status ?? -1 };
-}
-function isPlausibleOauthToken(s) {
-  const t = s.trim();
-  return t.startsWith("sk-ant-oat") && t.length >= 40;
-}
 
 // ../../packages/core/dist/index.js
 var claudeCodeLauncher = {
@@ -515,7 +506,7 @@ function passthroughFlags(opts) {
 }
 
 // src/wrapped-pty/run.ts
-import { spawnSync as spawnSync3 } from "child_process";
+import { spawnSync as spawnSync2 } from "child_process";
 
 // src/pty/pty-backend.ts
 async function loadPtyBackend() {
@@ -644,6 +635,7 @@ function ellipsizeHead(s, max) {
 }
 function activityCell(b) {
   if (b.pendingPrompt) return "\u25B2 prompt";
+  if (b.checkpointing) return "\u25C6 checkpoint";
   if (b.state !== "running") return `[${b.state}]`;
   switch (b.claudeActivity) {
     case "working":
@@ -842,10 +834,13 @@ function statusLine(box, w, stateLabel, groups = HINT_GROUPS) {
 }
 
 // src/wrapped-pty/footer.ts
+var SPINNER_FRAMES = ["\u25D0", "\u25D3", "\u25D1", "\u25D2"];
 var URGENT = "\x1B[38;5;220m\x1B[1m";
 var TXT = "\x1B[38;5;250m";
 var SUBTLE = "\x1B[38;5;245m";
 var RESET = "\x1B[0m";
+var NOTICE_BG = "\x1B[48;5;220m";
+var NOTICE_FG = "\x1B[38;5;16m\x1B[1m";
 var CLAUDE_IDLE_HINTS = [
   ["Control+a q", "detach"]
 ];
@@ -874,6 +869,13 @@ function renderFooter(state, cols) {
     const stateLabel = state.mode === "shell" ? "shell" : void 0;
     return statusLine(sidebarBox, cols, stateLabel, hints);
   }
+  if (state.kind === "notice") {
+    const spinner5 = SPINNER_FRAMES[state.frame % SPINNER_FRAMES.length];
+    const prefix = ` ${spinner5} `;
+    const inner2 = Math.max(0, cols - prefix.length);
+    const message2 = padTo(state.message, inner2);
+    return `${NOTICE_BG}${NOTICE_FG}${prefix}${message2}${RESET}`;
+  }
   const def = state.prompt.defaultAnswer ?? "n";
   const yn = def === "y" ? "[Y/n]" : "[y/N]";
   const tag2 = " [!] ";
@@ -962,6 +964,18 @@ function subscribePrompts(opts) {
           if (payload && typeof payload.id === "string") opts.onResolved(payload.id);
         } catch {
         }
+      } else if (event === "notice-set" && dataLine.length > 0) {
+        try {
+          const ev = JSON.parse(dataLine);
+          if (ev && typeof ev.id === "string") opts.onNotice?.(ev);
+        } catch {
+        }
+      } else if (event === "notice-clear" && dataLine.length > 0) {
+        try {
+          const payload = JSON.parse(dataLine);
+          if (payload && typeof payload.id === "string") opts.onNoticeCleared?.(payload.id);
+        } catch {
+        }
       }
     }
   }
@@ -1060,6 +1074,7 @@ function postAnswer(opts) {
 // src/wrapped-pty/run.ts
 var FOOTER_ROWS = 1;
 var STATUS_POLL_INTERVAL_MS = 3e3;
+var SPINNER_INTERVAL_MS = 120;
 async function runWrappedAttach(opts) {
   if (!process.stdout.isTTY || !process.stdin.isTTY) {
     return runFallback(opts.dockerArgv);
@@ -1090,6 +1105,10 @@ async function runWrappedAttach(opts) {
   let footerState = buildIdle();
   let lastSessionTitle;
   let lastActivity;
+  let capturingPrompt = null;
+  let activeNotice = null;
+  let noticeFrame = 0;
+  let spinnerTimer = null;
   const redrawFooter = () => {
     const cs = process.stdout.columns ?? cols;
     const rs = process.stdout.rows ?? rows;
@@ -1097,6 +1116,32 @@ async function runWrappedAttach(opts) {
     const payload = SYNC_BEGIN + CURSOR_SAVE + cursorMoveTo(rs, 1) + line + CURSOR_RESTORE + SYNC_END;
     process.stdout.write(payload);
   };
+  const recomputeFooter = () => {
+    if (capturingPrompt) {
+      footerState = { kind: "prompt", prompt: capturingPrompt };
+    } else if (activeNotice) {
+      footerState = { kind: "notice", message: activeNotice.message, frame: noticeFrame };
+    } else {
+      footerState = buildIdle(lastSessionTitle, lastActivity);
+    }
+  };
+  const startSpinner = () => {
+    if (spinnerTimer) return;
+    spinnerTimer = setInterval(() => {
+      noticeFrame++;
+      if (footerState.kind === "notice") {
+        recomputeFooter();
+        redrawFooter();
+      }
+    }, SPINNER_INTERVAL_MS);
+    if (typeof spinnerTimer.unref === "function") spinnerTimer.unref();
+  };
+  const stopSpinner = () => {
+    if (spinnerTimer) {
+      clearInterval(spinnerTimer);
+      spinnerTimer = null;
+    }
+  };
   pty.onData((d) => {
     process.stdout.write(d);
     redrawFooter();
@@ -1107,7 +1152,8 @@ async function runWrappedAttach(opts) {
     },
     onAnswer: (body) => {
       void postAnswer({ relayBaseUrl: opts.relayBaseUrl, body });
-      footerState = buildIdle(lastSessionTitle, lastActivity);
+      capturingPrompt = null;
+      recomputeFooter();
       redrawFooter();
     }
   });
@@ -1130,15 +1176,31 @@ async function runWrappedAttach(opts) {
     relayBaseUrl: opts.relayBaseUrl,
     boxId: opts.boxId,
     onPrompt: (ev) => {
-      footerState = { kind: "prompt", prompt: ev };
+      capturingPrompt = ev;
+      recomputeFooter();
       redrawFooter();
       router.capture(ev).catch(() => {
       });
     },
     onResolved: (id) => {
-      if (footerState.kind === "prompt" && footerState.prompt.id === id) {
+      if (capturingPrompt && capturingPrompt.id === id) {
+        capturingPrompt = null;
         router.abort("resolved-elsewhere");
-        footerState = buildIdle(lastSessionTitle, lastActivity);
+        recomputeFooter();
+        redrawFooter();
+      }
+    },
+    onNotice: (ev) => {
+      activeNotice = ev;
+      startSpinner();
+      recomputeFooter();
+      redrawFooter();
+    },
+    onNoticeCleared: (id) => {
+      if (activeNotice && activeNotice.id === id) {
+        activeNotice = null;
+        stopSpinner();
+        recomputeFooter();
         redrawFooter();
       }
     }
@@ -1156,7 +1218,7 @@ async function runWrappedAttach(opts) {
       lastSessionTitle = nextTitle;
       lastActivity = nextActivity;
       if (footerState.kind === "idle") {
-        footerState = buildIdle(lastSessionTitle, lastActivity);
+        recomputeFooter();
         redrawFooter();
       }
     } catch {
@@ -1178,6 +1240,7 @@ async function runWrappedAttach(opts) {
   process.stdin.off("data", onStdinData);
   process.stdout.off("resize", onResize);
   clearInterval(statusTimer);
+  stopSpinner();
   if (process.stdin.isTTY) process.stdin.setRawMode(false);
   process.stdin.pause();
   stream.close();
@@ -1193,7 +1256,7 @@ async function runWrappedAttach(opts) {
   return exitCode;
 }
 function runFallback(argv) {
-  const child = spawnSync3("docker", argv, { stdio: "inherit" });
+  const child = spawnSync2("docker", argv, { stdio: "inherit" });
   return child.status ?? 0;
 }
 
@@ -1201,6 +1264,12 @@ function runFallback(argv) {
 function reattachRef(r) {
   return typeof r.projectIndex === "number" ? String(r.projectIndex) : r.name;
 }
+function logPrune(rebuild) {
+  if (rebuild.prunedBytes <= 0) return;
+  const mb = Math.round(rebuild.prunedBytes / 1024 / 1024);
+  const n = rebuild.pruned.length;
+  log5.info(`pruned ${String(n)} stale plugin cache${n === 1 ? "" : "s"} (${String(mb)} MB freed)`);
+}
 var RELAY_HOST_URL = `http://127.0.0.1:${String(DEFAULT_RELAY_PORT)}`;
 async function attachClaudeWrapped(box, sessionName, reattach) {
   const code = await runWrappedAttach({
@@ -1231,39 +1300,46 @@ function buildClaudeCliOverrides(opts) {
   if (Object.keys(claude).length > 0) out.claude = claude;
   return out;
 }
-async function offerSetupToken() {
-  log5.info("first time setup: setup token for Claude Code");
-  const canRun = hostClaudeAvailable();
-  if (canRun) {
-    const yes = await confirm2({
-      message: "Run `claude setup-token` now to save a token?",
-      initialValue: true
+async function runClaudeLoginContainer(image, extraArgs) {
+  const { exitCode } = runInteractiveClaudeLogin(
+    buildClaudeLoginRunArgv({ volume: SHARED_CLAUDE_VOLUME, image, extraArgs })
+  );
+  if (exitCode === 0) {
+    const s = spinner();
+    s.start("checking credentials");
+    const warm = await warmUpClaudeCredentials(SHARED_CLAUDE_VOLUME, image, {
+      onProgress: (line) => s.message(clampSpinnerLine(line))
     });
-    if (isCancel2(yes) || !yes) {
-      log5.info("ok, continuing without a saved token; /login inside the box once and it persists in the shared volume.");
-      return null;
-    }
-    const { exitCode } = runHostSetupToken();
-    if (exitCode !== 0) {
-      log5.warn(`\`claude setup-token\` exited with code ${String(exitCode)}; you can still paste a token below if you have one.`);
-    }
-  } else {
-    log5.warn(
-      "Claude Code is not installed on the host, so I cannot run `claude setup-token` for you. Run it on a machine that has Claude Code installed, then paste the token below \u2014 or skip and /login inside the box."
-    );
+    s.stop(warm.warmed ? "credentials ready" : "credentials check incomplete \u2014 continuing");
+    await syncClaudeCredentials({ volume: SHARED_CLAUDE_VOLUME }, { image, isolate: false });
   }
-  const pasted = await password({ message: "Paste OAuth token (or empty to skip):" });
-  if (isCancel2(pasted) || !pasted) {
-    log5.info("ok, continuing without a saved token; /login inside the box once and it persists in the shared volume.");
-    return null;
+  return exitCode;
+}
+async function maybeRunClaudeLogin(args) {
+  if (!process.stdin.isTTY || args.yes) return;
+  if (args.authSource === "host-env") return;
+  if (await hostBackupHasCredentials()) return;
+  const message = args.authSource === "auth-file" ? "You're on a legacy API token (shows as 'Claude API'). Sign in with your Claude subscription instead?" : "Sign in with your Claude subscription? (saved and reused by every box)";
+  const answer = await confirm2({ message, initialValue: true });
+  if (isCancel2(answer) || !answer) {
+    log5.info("Skipped sign-in \u2014 claude will prompt you to /login inside the box.");
+    return;
   }
-  const token = pasted.trim();
-  if (!isPlausibleOauthToken(token)) {
-    log5.warn("That doesn't look like an OAuth token (expected `sk-ant-oat\u2026`); saving anyway \u2014 verify inside the box.");
+  const s = spinner();
+  s.start("preparing sandbox image");
+  await ensureImage(args.image, { onProgress: (line) => s.message(clampSpinnerLine(line)) });
+  s.message("preparing claude config");
+  await ensureClaudeVolume(
+    { volume: SHARED_CLAUDE_VOLUME },
+    { syncFromHost: true, image: args.image, hostWorkspace: args.hostWorkspace }
+  );
+  s.stop("image ready");
+  const exitCode = await runClaudeLoginContainer(args.image, ["--claudeai"]);
+  if (exitCode !== 0) {
+    log5.warn("Claude login did not complete; continuing \u2014 run `agentbox claude login` to retry.");
+    return;
   }
-  await writeAuthFile({ claudeCodeOauthToken: token });
-  log5.success(`saved to ${AUTH_FILE} (mode 0600)`);
-  return { env: { CLAUDE_CODE_OAUTH_TOKEN: token }, source: "auth-file" };
+  log5.success("Signed in with your Claude subscription \u2014 saved for future boxes.");
 }
 var claudeCommand = new Command2("claude").description("Create a sandboxed box and launch Claude Code in a detachable tmux session").option("-w, --workspace <path>", "host workspace to mount", process.cwd()).option("-n, --name <name>", "friendly box name (default: <workspace-basename>-<id>)").option("--host-snapshot", "APFS-clone the host workspace into a per-box scratch dir before seeding /workspace (stabilizes the tar-pipe source)").option("--no-host-snapshot", "tar-pipe directly from the live host workspace at create time").option(
   "--snapshot <ref>",
@@ -1287,6 +1363,13 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
   });
   const projectRoot = (await findProjectRoot(opts.workspace)).root;
   const checkpointRef = opts.snapshot && opts.snapshot.length > 0 ? opts.snapshot : cfg.effective.box.defaultCheckpoint.length > 0 ? cfg.effective.box.defaultCheckpoint : void 0;
+  const resolved = await resolveClaudeAuth(process.env);
+  await maybeRunClaudeLogin({
+    image: cfg.effective.box.image,
+    authSource: resolved.source,
+    yes: !!opts.yes,
+    hostWorkspace: opts.workspace
+  });
   const wiz = await maybeRunSetupWizard({
     workspace: opts.workspace,
     yes: !!opts.yes,
@@ -1303,11 +1386,6 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
   }
   const useSnapshot = opts.hostSnapshot === false ? false : opts.hostSnapshot === true ? true : cfg.effective.box.hostSnapshot ?? false;
   const sessionName = cfg.effective.claude.sessionName;
-  let resolved = await resolveClaudeAuth(process.env);
-  if (resolved.source === "none" && process.stdin.isTTY && !opts.yes) {
-    const next = await offerSetupToken();
-    if (next) resolved = next;
-  }
   const s = spinner();
   s.start("creating box");
   let containerName = "";
@@ -1345,6 +1423,7 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
     });
     const nSuffix = typeof result.record.projectIndex === "number" ? `  \xB7  n ${String(result.record.projectIndex)}` : "";
     s.stop(`box ${result.record.container} ready${nSuffix}`);
+    logPrune(rebuild);
     for (const f of rebuild.failed) {
       log5.warn(`plugin install failed for ${f.dir}; claude may still load it. stderr:
 ${f.stderr.trim()}`);
@@ -1369,6 +1448,7 @@ async function startOrAttachClaude(box, claudeArgs, opts) {
     cliOverrides: opts.sessionName ? { claude: { sessionName: opts.sessionName } } : {}
   });
   const sessionName = cfg.effective.claude.sessionName;
+  const resolved = await resolveClaudeAuth(process.env);
   const insp = await inspectBox(box.id);
   if (insp.state === "missing") {
     throw new Error(`box ${box.name} has no container; was it destroyed?`);
@@ -1379,6 +1459,12 @@ async function startOrAttachClaude(box, claudeArgs, opts) {
     await attachClaudeWrapped(box, sessionName, reattachRef(box));
     return;
   }
+  await maybeRunClaudeLogin({
+    image: box.image,
+    authSource: resolved.source,
+    yes: false,
+    hostWorkspace: box.workspacePath
+  });
   const s = spinner();
   s.start("preparing box");
   if (insp.state === "paused") {
@@ -1401,7 +1487,12 @@ async function startOrAttachClaude(box, claudeArgs, opts) {
       }
     );
   }
-  await seedSetupSkillIntoVolume(box.claudeConfigVolume ?? SHARED_CLAUDE_VOLUME, box.image);
+  const claudeVolume = box.claudeConfigVolume ?? SHARED_CLAUDE_VOLUME;
+  await seedSetupSkillIntoVolume(claudeVolume, box.image);
+  await syncClaudeCredentials(
+    { volume: claudeVolume },
+    { image: box.image, isolate: claudeVolume !== SHARED_CLAUDE_VOLUME }
+  );
   s.message("checking plugin native deps");
   const rebuild = await rebuildPluginNativeDeps(box.container, {
     volume: box.claudeConfigVolume ?? SHARED_CLAUDE_VOLUME,
@@ -1415,6 +1506,7 @@ async function startOrAttachClaude(box, claudeArgs, opts) {
     boxName: box.name
   });
   s.stop(`box ${box.container} ready`);
+  logPrune(rebuild);
   for (const f of rebuild.failed) {
     log5.warn(`plugin install failed for ${f.dir}; claude may still load it. stderr:
 ${f.stderr.trim()}`);
@@ -1423,19 +1515,16 @@ ${f.stderr.trim()}`);
   await attachClaudeWrapped(box, sessionName, reattachRef(box));
 }
 var claudeAttachCommand = new Command2("attach").description(
-  "Attach to a Claude Code tmux session in a box, starting one if none is running (auto-unpause/start)"
+  "Attach to a Claude Code tmux session in a box, starting one if none is running (auto-unpause/start; never re-syncs ~/.claude \u2014 use `claude start` for that)"
 ).argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
-).option("--session-name <name>", "tmux session name (default from config; built-in: claude)").option(
-  "--no-sync-config",
-  "when starting a fresh session, skip rsyncing the host's ~/.claude into the box's volume (faster)"
-).action(async function(idOrName) {
+).option("--session-name <name>", "tmux session name (default from config; built-in: claude)").action(async function(idOrName) {
   const opts = this.optsWithGlobals();
   intro("Attaching to Claude session...");
   try {
     const box = await resolveBoxOrExit(idOrName);
-    await startOrAttachClaude(box, [], opts);
+    await startOrAttachClaude(box, [], { ...opts, syncConfig: false });
   } catch (err) {
     if (err instanceof ClaudeSessionError) {
       log5.error(err.message);
@@ -1470,12 +1559,43 @@ var claudeStartCommand = new Command2("start").description(
     handleLifecycleError(err);
   }
 });
+var claudeLoginCommand = new Command2("login").description(
+  "Sign in to Claude for use in sandboxes (forwards args to `claude auth login`, e.g. --sso, --console). Runs in a throwaway container against the shared claude-config volume \u2014 usable before the first `agentbox claude`."
+).argument(
+  "[args...]",
+  "extra args forwarded to `claude auth login`; place after `--`, e.g. `agentbox claude login -- --sso`"
+).action(async (args) => {
+  intro("Signing in to Claude...");
+  if (!process.stdin.isTTY) {
+    log5.error("`agentbox claude login` needs an interactive terminal.");
+    process.exit(1);
+  }
+  try {
+    const cfg = await loadEffectiveConfig(process.cwd());
+    const image = cfg.effective.box.image;
+    const s = spinner();
+    s.start("preparing sandbox image");
+    await ensureImage(image, { onProgress: (line) => s.message(clampSpinnerLine(line)) });
+    s.stop("image ready");
+    const exitCode = await runClaudeLoginContainer(image, args);
+    if (exitCode !== 0) {
+      log5.warn(`\`claude auth login\` exited with code ${String(exitCode)}`);
+      process.exit(exitCode);
+    }
+    outro("signed in \u2014 credentials saved for future boxes");
+  } catch (err) {
+    handleLifecycleError(err);
+  }
+});
 claudeCommand.addCommand(claudeAttachCommand);
 claudeCommand.addCommand(claudeStartCommand);
+claudeCommand.addCommand(claudeLoginCommand);
 
 // src/commands/checkpoint.ts
 import { confirm as confirm3, isCancel as isCancel3, log as log6 } from "@clack/prompts";
 import { Command as Command3 } from "commander";
+var CHECKPOINT_NOTICE = "Checkpoint in progress \u2014 the box will be unresponsive for a moment";
+var CHECKPOINT_NOTICE_TTL_MS = 66e4;
 async function projectRootFor(cwd, recordRoot) {
   return recordRoot ?? (await findProjectRoot(cwd)).root;
 }
@@ -1500,21 +1620,50 @@ var createSub = new Command3("create").description("Capture a box state as a pro
     }
     const projectRoot = await projectRootFor(box.workspacePath, box.projectRoot);
     const cfg = await loadEffectiveConfig(projectRoot);
-    const info = await createCheckpoint({
-      box,
-      projectRoot,
-      name: opts.name,
-      merged: opts.merged === true,
-      setDefault: opts.setDefault === true,
-      replace: opts.replace === true,
-      maxLayers: cfg.effective.checkpoint.maxLayers,
-      onLog: (line) => log6.info(line)
-    });
-    log6.success(
-      `checkpoint ${info.name} (${info.manifest.type}) -> ${info.dir}` + (opts.setDefault ? "  [project default]" : "")
+    const noticeId = await setRelayNotice(
+      box.id,
+      "checkpoint",
+      CHECKPOINT_NOTICE,
+      CHECKPOINT_NOTICE_TTL_MS
     );
-    if (!opts.setDefault) {
-      log6.info(`make it the default for new boxes: agentbox checkpoint set-default ${info.name}`);
+    let signalled = false;
+    const onSignal = () => {
+      if (signalled) return;
+      signalled = true;
+      void (async () => {
+        if (noticeId) await clearRelayNotice(box.id, noticeId);
+        process.exit(130);
+      })();
+    };
+    if (noticeId) {
+      process.once("SIGINT", onSignal);
+      process.once("SIGTERM", onSignal);
+    }
+    try {
+      const info = await createCheckpoint({
+        box,
+        projectRoot,
+        name: opts.name,
+        merged: opts.merged === true,
+        setDefault: opts.setDefault === true,
+        replace: opts.replace === true,
+        maxLayers: cfg.effective.checkpoint.maxLayers,
+        onLog: (line) => log6.info(line)
+      });
+      log6.success(
+        `checkpoint ${info.name} (${info.manifest.type}) -> ${info.dir}` + (opts.setDefault ? "  [project default]" : "")
+      );
+      if (!opts.setDefault) {
+        log6.info(
+          `make it the default for new boxes: agentbox checkpoint set-default ${info.name}`
+        );
+      }
+    } finally {
+      if (noticeId) {
+        await clearRelayNotice(box.id, noticeId);
+        process.removeListener("SIGINT", onSignal);
+        process.removeListener("SIGTERM", onSignal);
+      }
     }
   } catch (err) {
     handleLifecycleError(err);
@@ -1598,7 +1747,7 @@ var rmSub = new Command3("rm").description("Delete a checkpoint").argument("<ref
     handleLifecycleError(err);
   }
 });
-var checkpointCommand = new Command3("checkpoint").description("Capture and manage project checkpoints (warm box state new boxes can start from)").addCommand(createSub, { isDefault: true }).addCommand(lsSub).addCommand(setDefaultSub).addCommand(rmSub);
+var checkpointCommand = new Command3("checkpoint").alias("checkpoints").description("List and manage project checkpoints (warm box state new boxes can start from)").addCommand(createSub).addCommand(lsSub, { isDefault: true }).addCommand(setDefaultSub).addCommand(rmSub);
 
 // src/commands/code.ts
 import { spawn } from "child_process";
@@ -1761,7 +1910,7 @@ async function fetchServiceNames(container) {
 }
 
 // src/commands/config.ts
-import { spawnSync as spawnSync4 } from "child_process";
+import { spawnSync as spawnSync3 } from "child_process";
 import { Command as Command5, InvalidArgumentError as InvalidArgumentError2 } from "commander";
 function resolveWriteScope(opts) {
   if (opts.global && opts.project) {
@@ -1986,7 +2135,7 @@ var editCommand = new Command5("edit").description("Open a config file in $EDITO
     const scope = resolveEditScope(opts);
     const path2 = await configPathFor(scope, process.cwd());
     const editor = process.env["EDITOR"] || process.env["VISUAL"] || "vi";
-    const child = spawnSync4(editor, [path2], { stdio: "inherit" });
+    const child = spawnSync3(editor, [path2], { stdio: "inherit" });
     process.exit(child.status ?? 0);
   } catch (err) {
     handleError(err);
@@ -2240,7 +2389,7 @@ var cpCommand = new Command6("cp").description("Copy files between host and box
 // src/commands/create.ts
 import { intro as intro2, log as log9, outro as outro2, spinner as spinner2 } from "@clack/prompts";
 import { Command as Command7 } from "commander";
-import { execSync, spawnSync as spawnSync5 } from "child_process";
+import { execSync, spawnSync as spawnSync4 } from "child_process";
 function buildCliOverrides(opts) {
   const box = {};
   if (opts.hostSnapshot !== void 0) box.hostSnapshot = opts.hostSnapshot;
@@ -2264,7 +2413,7 @@ var RELAY_HOST_URL2 = `http://127.0.0.1:${String(DEFAULT_RELAY_PORT)}`;
 async function attachShell(record) {
   const dockerArgv = ["exec", "-it", record.container, "bash"];
   if (!process.stdout.isTTY || !process.stdin.isTTY) {
-    const child = spawnSync5("docker", dockerArgv, { stdio: "inherit" });
+    const child = spawnSync4("docker", dockerArgv, { stdio: "inherit" });
     process.exit(child.status ?? 0);
   }
   const code = await runWrappedAttach({
@@ -2802,6 +2951,7 @@ var POLL_MS = 1e3;
 var FRAME_MS = 16;
 var RESIZE_DEBOUNCE_MS = 120;
 var LEADER_LINGER_MS = 1500;
+var NOTICE_SPINNER_MS = 120;
 var SYNC_BEGIN2 = "\x1B[?2026h";
 var SYNC_END2 = "\x1B[?2026l";
 function cursorTo2(x, y) {
@@ -2894,6 +3044,16 @@ var Compositor = class {
    * we can dispose them when boxes disappear from the list.
    */
   activePrompts = /* @__PURE__ */ new Map();
+  /**
+   * Per-box active relay notice (currently: a checkpoint freezing the box).
+   * Drives the `◆ checkpoint` sidebar cell and the animated status-bar
+   * warning. Shares the SSE subscriptions in {@link promptStreams}.
+   */
+  activeNotices = /* @__PURE__ */ new Map();
+  /** Monotonic spinner counter for the notice status bar. */
+  noticeFrame = 0;
+  /** Drives the spinner animation while {@link activeNotices} is non-empty. */
+  noticeTimer = null;
   promptStreams = /* @__PURE__ */ new Map();
   activeMode = "claude";
   flashMsg = null;
@@ -2971,7 +3131,10 @@ var Compositor = class {
       if (!wanted.has(boxId)) {
         stream.close();
         this.promptStreams.delete(boxId);
-        if (this.activePrompts.delete(boxId)) this.drawChrome();
+        let changed = this.activePrompts.delete(boxId);
+        if (this.activeNotices.delete(boxId)) changed = true;
+        if (this.activeNotices.size === 0) this.stopNoticeSpinner();
+        if (changed) this.drawChrome();
       }
     }
     for (const boxId of wanted) {
@@ -2992,12 +3155,41 @@ var Compositor = class {
             this.drawChrome();
           }
         },
+        onNotice: (ev) => {
+          if (this.tornDown) return;
+          this.activeNotices.set(boxId, ev);
+          this.startNoticeSpinner();
+          this.drawChrome();
+        },
+        onNoticeCleared: (id) => {
+          if (this.tornDown) return;
+          const current = this.activeNotices.get(boxId);
+          if (current && current.id === id) {
+            this.activeNotices.delete(boxId);
+            if (this.activeNotices.size === 0) this.stopNoticeSpinner();
+            this.drawChrome();
+          }
+        },
         onError: () => {
         }
       });
       this.promptStreams.set(boxId, stream);
     }
   }
+  startNoticeSpinner() {
+    if (this.noticeTimer) return;
+    this.noticeTimer = setInterval(() => {
+      this.noticeFrame++;
+      this.drawChrome();
+    }, NOTICE_SPINNER_MS);
+    if (typeof this.noticeTimer.unref === "function") this.noticeTimer.unref();
+  }
+  stopNoticeSpinner() {
+    if (this.noticeTimer) {
+      clearInterval(this.noticeTimer);
+      this.noticeTimer = null;
+    }
+  }
   selectedBox() {
     return this.boxes.find((b) => b.id === this.selectedId);
   }
@@ -3469,9 +3661,12 @@ var Compositor = class {
   drawChrome() {
     if (this.tornDown || this.layout.tooSmall) return;
     const { sidebar, sepX, statusY } = this.layout;
-    const boxesWithPrompt = this.activePrompts.size === 0 ? this.boxes : this.boxes.map(
-      (b) => this.activePrompts.has(b.id) ? { ...b, pendingPrompt: true } : b
-    );
+    const decorate = this.activePrompts.size > 0 || this.activeNotices.size > 0;
+    const boxesWithPrompt = decorate ? this.boxes.map((b) => {
+      const pendingPrompt = this.activePrompts.has(b.id);
+      const checkpointing = this.activeNotices.has(b.id);
+      return pendingPrompt || checkpointing ? { ...b, pendingPrompt, checkpointing } : b;
+    }) : this.boxes;
     const { lines, rowOwner, headerRows } = sidebarLines(
       boxesWithPrompt,
       this.selectedId,
@@ -3505,6 +3700,12 @@ var Compositor = class {
         { kind: "prompt", prompt: activePromptForSelected },
         this.layout.cols
       );
+    } else if (this.activeNotices.has(this.selectedId)) {
+      const notice = this.activeNotices.get(this.selectedId);
+      status = renderFooter(
+        { kind: "notice", message: notice.message, frame: this.noticeFrame },
+        this.layout.cols
+      );
     } else {
       const stateLabel = this.selectedId === NEW_BOX_ID ? "create" : this.menu ? "menu" : this.session && this.activeMode === "shell" ? "shell" : void 0;
       status = statusLine(
@@ -3540,9 +3741,11 @@ var Compositor = class {
     if (this.resizeTimer) clearTimeout(this.resizeTimer);
     if (this.flashTimer) clearTimeout(this.flashTimer);
     if (this.leaderLingerTimer) clearTimeout(this.leaderLingerTimer);
+    if (this.noticeTimer) clearInterval(this.noticeTimer);
     for (const stream of this.promptStreams.values()) stream.close();
     this.promptStreams.clear();
     this.activePrompts.clear();
+    this.activeNotices.clear();
     this.parser.dispose();
     this.disposeSession();
     this.inp.off("data", this.onData);
@@ -3655,6 +3858,11 @@ var dashboardCommand = new Command8("dashboard").description("Box list + the sel
       await rebuildPluginNativeDeps(box.container, {
         volume: box.claudeConfigVolume
       });
+      const claudeVolume = box.claudeConfigVolume ?? SHARED_CLAUDE_VOLUME;
+      await syncClaudeCredentials(
+        { volume: claudeVolume },
+        { image: box.image, isolate: claudeVolume !== SHARED_CLAUDE_VOLUME }
+      );
       await startClaudeSession({ container: box.container, claudeArgs: [], boxName: box.name });
       const info = await claudeSessionInfo(box.container);
       return {
@@ -4609,7 +4817,7 @@ var restartSub = new Command19("restart").description("Stop then start the host
 var relayCommand = new Command19("relay").description("Manage the host relay process (status / stop / start / restart)").addCommand(statusSub, { isDefault: true }).addCommand(stopSub).addCommand(startSub).addCommand(restartSub);
 
 // src/commands/screen.ts
-import { spawnSync as spawnSync6 } from "child_process";
+import { spawnSync as spawnSync5 } from "child_process";
 import { log as log20 } from "@clack/prompts";
 import { Command as Command20 } from "commander";
 var screenCommand = new Command20("screen").description("Open a box's VNC (noVNC) viewer in the browser (auto-unpause/start)").argument(
@@ -4657,7 +4865,7 @@ var screenCommand = new Command20("screen").description("Open a box's VNC (noVNC
 `);
       return;
     }
-    const opened = spawnSync6("open", [url], { stdio: "inherit" });
+    const opened = spawnSync5("open", [url], { stdio: "inherit" });
     if (opened.status !== 0) {
       throw new Error(`open ${url} failed (exit ${String(opened.status ?? "n/a")})`);
     }
@@ -4669,7 +4877,7 @@ var screenCommand = new Command20("screen").description("Open a box's VNC (noVNC
 });
 
 // src/commands/shell.ts
-import { spawnSync as spawnSync7 } from "child_process";
+import { spawnSync as spawnSync6 } from "child_process";
 import { log as log21 } from "@clack/prompts";
 import { Command as Command21 } from "commander";
 var RELAY_HOST_URL3 = `http://127.0.0.1:${String(DEFAULT_RELAY_PORT)}`;
@@ -4722,7 +4930,7 @@ var shellCommand = new Command21("shell").description("Open an interactive bash
       ...bashArgs
     ];
     if (!isInteractive || effectiveCmd.length > 0) {
-      const child = spawnSync7("docker", dockerArgv, { stdio: "inherit" });
+      const child = spawnSync6("docker", dockerArgv, { stdio: "inherit" });
       process.exit(child.status ?? 0);
     }
     const code = await runWrappedAttach({