@madarco/agentbox 0.8.0 → 0.9.0

package/dist/index.js

@@ -16,18 +16,27 @@ import {
   secretsPath as secretsPath2,
   syncFirewallSource
 } from "./chunk-I24B6AXR.js";
+import {
+  detectSbx,
+  ensureVercelCredentials,
+  installSbxHint,
+  maskKey as maskKey3,
+  readVercelCredStatus,
+  secretsPath as secretsPath3
+} from "./chunk-MTVI44DW.js";
 import {
   agentSpecsForCloud,
   ensureAgentVolumesForCloud,
   listCloudCheckpoints,
   resolveCloudCheckpoint,
   seedAgentVolumesIfFresh
-} from "./chunk-67N47KUS.js";
+} from "./chunk-BXQMIEHC.js";
 import {
   ADVANCED_HINT_GROUPS,
   NEW_BOX_ID,
   NEW_BOX_LABEL,
   buildCloudAttachInnerCommand,
+  clipboardCaptureAvailable,
   cloudAgentAttach,
   createMenuLines,
   detectHostTerminal,
@@ -36,15 +45,20 @@ import {
   lifecycleMenuLines,
   loadPtyBackend,
   menuLines,
+  pasteHostClipboardImage,
+  popTerminalTitle,
   postAnswer,
   providerForBox,
   providerForCreate,
+  pushTerminalTitle,
   renderFooter,
   runWrappedAttach,
+  setTerminalTitle,
   sidebarLines,
   statusLine,
+  stripTitleGlyph,
   subscribePrompts
-} from "./chunk-FODMEHD3.js";
+} from "./chunk-GU5LW4B5.js";
 import {
   AmbiguousBoxError,
   BOX_STATUS_EVENT,
@@ -109,6 +123,7 @@ import {
   hashRpcParams,
   hostBackupHasCredentials,
   ideProfile,
+  injectPrCreateHead,
   inspectBox,
   installPortless,
   killShellSession,
@@ -184,7 +199,7 @@ import {
   waitForTmuxPaneContent,
   warmUpClaudeCredentials,
   writeJob
-} from "./chunk-6OZDFNBF.js";
+} from "./chunk-NCJP5MTN.js";
 import {
   DEFAULT_BOX_IMAGE,
   STATE_DIR,
@@ -192,15 +207,15 @@ import {
   imageInfo,
   readState,
   resolveBoxRef
-} from "./chunk-BGK32PZE.js";
+} from "./chunk-KL36BRN4.js";
 import "./chunk-G3H2L3O2.js";
 
 // src/version.ts
-var AGENTBOX_VERSION = true ? "0.8.0" : "0.0.0-dev";
-var AGENTBOX_COMMIT = true ? "ab8f9c3" : "dev";
+var AGENTBOX_VERSION = true ? "0.9.0" : "0.0.0-dev";
+var AGENTBOX_COMMIT = true ? "78c06a7" : "dev";
 
 // src/index.ts
-import { Command as Command44 } from "commander";
+import { Command as Command45 } from "commander";
 
 // src/engine-override.ts
 async function applyEngineOverrideAtStartup() {
@@ -666,12 +681,23 @@ function buildPromptArgs(agentKind, prompt, userArgs) {
   return resolveAgentLauncher(agentKind).buildArgs(prompt, userArgs);
 }
 
+// src/lib/queue/parse-max-option.ts
+function parseMaxOption(flag, raw) {
+  if (raw === void 0) return void 0;
+  const n = Number(raw);
+  if (!Number.isInteger(n) || n <= 0) {
+    throw new Error(`${flag}: expected a positive integer, got "${raw}"`);
+  }
+  return n;
+}
+
 // src/lib/queue/submit.ts
 import { randomBytes } from "crypto";
 import { request as httpRequest } from "http";
 async function submitQueueJob(input) {
   const cfg = await loadQueueConfig();
   const ceiling = typeof input.maxRunningOverride === "number" && input.maxRunningOverride > 0 ? input.maxRunningOverride : cfg.maxConcurrent;
+  const maxWorking = typeof input.maxWorkingOverride === "number" && input.maxWorkingOverride > 0 ? input.maxWorkingOverride : void 0;
   const id = newJobId();
   const job = {
     id,
@@ -683,6 +709,7 @@ async function submitQueueJob(input) {
     agentArgs: input.agentArgs,
     createOpts: input.createOpts,
     maxConcurrent: ceiling,
+    ...maxWorking !== void 0 ? { maxWorking } : {},
     createdAt: (/* @__PURE__ */ new Date()).toISOString(),
     logPath: queueLogPath(id)
   };
@@ -1143,7 +1170,7 @@ async function dirSizeCapped(dir, cap) {
 
 // src/lib/carry-gate.ts
 async function runCarryGate(args) {
-  const log44 = args.onLog ?? (() => {
+  const log45 = args.onLog ?? (() => {
   });
   const yamlPath = join4(args.projectRoot, "agentbox.yaml");
   const items = await loadCarrySection(yamlPath);
@@ -1165,7 +1192,7 @@ async function runCarryGate(args) {
   });
   if (decision === "cancel") return { decision: "cancel" };
   if (decision === "skip-this-run") {
-    log44(`carry: skipped for this box (${String(resolved.entries.length)} entry/entries not copied)`);
+    log45(`carry: skipped for this box (${String(resolved.entries.length)} entry/entries not copied)`);
     return { decision: "skip", entries: [] };
   }
   return { decision: "approve", entries: resolved.entries };
@@ -1205,6 +1232,63 @@ async function resolveFromBranch(ref, opts) {
   }
   return ref;
 }
+var UseBranchError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "UseBranchError";
+  }
+};
+async function resolveUseBranch(name, opts) {
+  if (!name || name.length === 0) return void 0;
+  const remote = opts.remote ?? "origin";
+  await execa("git", ["-C", opts.repo, "fetch", "--quiet", remote, name], {
+    reject: false
+  });
+  const exists = await execa(
+    "git",
+    ["-C", opts.repo, "show-ref", "--verify", "--quiet", `refs/heads/${name}`],
+    { reject: false }
+  );
+  if (exists.exitCode !== 0) {
+    throw new UseBranchError(
+      `--use-branch: no local branch "${name}" in ${opts.repo}. Create or check it out on the host first (--use-branch reuses an existing branch; use --from-branch to fork a new box branch from a ref).`
+    );
+  }
+  return name;
+}
+async function currentHostBranch(repo) {
+  const r = await execa("git", ["-C", repo, "rev-parse", "--abbrev-ref", "HEAD"], {
+    reject: false
+  });
+  if (r.exitCode !== 0) return void 0;
+  const branch = r.stdout.trim();
+  if (!branch || branch === "HEAD") return void 0;
+  return branch;
+}
+async function resolveBranchSelection(opts) {
+  if (opts.useBranch && opts.fromBranch) {
+    throw new UseBranchError(
+      "--use-branch and --from-branch are mutually exclusive: --use-branch reuses an existing branch, --from-branch forks a new box branch from a base ref. Pass only one."
+    );
+  }
+  if (opts.useBranch) {
+    return { useBranch: await resolveUseBranch(opts.useBranch, { repo: opts.repo }) };
+  }
+  if (opts.fromBranch) {
+    return { fromBranch: await resolveFromBranch(opts.fromBranch, { repo: opts.repo }) };
+  }
+  if (opts.providerName !== "docker" && opts.cloudUseCurrentBranch) {
+    const current = await currentHostBranch(opts.repo);
+    if (current) {
+      opts.log?.(`cloud.useCurrentBranch: starting box on host branch "${current}"`);
+      return { useBranch: current };
+    }
+    opts.log?.(
+      "cloud.useCurrentBranch is set but host HEAD is detached; forking a fresh branch instead"
+    );
+  }
+  return {};
+}
 
 // src/session-teleport/claude.ts
 import { mkdir, mkdtemp, readdir, readFile as readFile2, stat as stat3, writeFile } from "fs/promises";
@@ -1784,7 +1868,7 @@ async function maybeRunSetupWizard(args) {
     }
   }
   const go = await confirm2({
-    message: "New project detected, run setup wizard?",
+    message: "New project: run setup wizard? Will install dependencies and setup agentbox.yaml",
     initialValue: true
   });
   if (isCancel3(go) || !go) return { action: "proceed", envFilesToImport };
@@ -1830,14 +1914,6 @@ function passthroughFlags(opts) {
 function reattachRef(r) {
   return typeof r.projectIndex === "number" ? String(r.projectIndex) : r.name;
 }
-function parseMaxRunningOption(raw) {
-  if (raw === void 0) return void 0;
-  const n = Number(raw);
-  if (!Number.isInteger(n) || n <= 0) {
-    throw new Error(`--max-running: expected a positive integer, got "${raw}"`);
-  }
-  return n;
-}
 function pickCreateOpts(opts) {
   return {
     workspace: opts.workspace,
@@ -1865,6 +1941,8 @@ function logPrune(rebuild) {
 }
 var RELAY_HOST_URL = `http://127.0.0.1:${String(DEFAULT_RELAY_PORT)}`;
 async function attachClaudeWrapped(box, sessionName, reattach, onError, openIn) {
+  const provider = await providerForBox(box);
+  const canPaste = await clipboardCaptureAvailable();
   const code = await runWrappedAttach({
     container: box.container,
     dockerArgv: buildClaudeAttachArgv(box.container, sessionName),
@@ -1875,7 +1953,8 @@ async function attachClaudeWrapped(box, sessionName, reattach, onError, openIn)
     mode: "claude",
     detachNotice: formatDetachNotice(reattach),
     onError,
-    openIn
+    openIn,
+    onPasteImage: canPaste ? () => pasteHostClipboardImage(provider, box) : void 0
   });
   process.exit(code);
 }
@@ -1967,15 +2046,21 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
 ).option(
   "--from-branch <ref>",
   "base the box's per-box branch on this ref (branch / tag / SHA) instead of HEAD. Branch/tag names are fetched from origin first."
+).option(
+  "-b, --use-branch <name>",
+  "reuse an existing branch directly instead of forking agentbox/<box-name>. Commits/pushes flow straight to it. Docker fails if the host already has it checked out. Mutually exclusive with --from-branch."
 ).option(
   "-v, --verbose",
   "bypass the spinner and stream raw provider output (docker build / Daytona snapshot create) to stderr. The same content always lands in ~/.agentbox/logs/claude.log."
-).option("--attach-in <mode>", ATTACH_IN_HELP).option("--inline", INLINE_HELP).option("-b, --no-attach", NO_ATTACH_HELP).option(
+).option("--attach-in <mode>", ATTACH_IN_HELP).option("--inline", INLINE_HELP).option("-d, --no-attach", NO_ATTACH_HELP).option(
   "-i, --initial-prompt <text>",
   "seed the claude session with this initial user turn and run in background (no attach). Jobs go through the host-wide queue (queue.maxConcurrent). NOTE: this is NOT claude's own `-p` headless print mode \u2014 for that, pass `-- -p ...`."
 ).option(
   "--max-running <n>",
   "per-invocation override of queue.maxConcurrent; only honored when `-i` is set"
+).option(
+  "--max-working <n>",
+  "per-invocation override of queue.maxWorking; only honored when `-i` is set"
 ).option(
   "-c, --continue",
   "teleport the most recent host Claude Code session for this cwd into the box and resume from it"
@@ -2046,7 +2131,8 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
       }
       throw err;
     }
-    const maxRunningOverride = parseMaxRunningOption(opts.maxRunning);
+    const maxRunningOverride = parseMaxOption("--max-running", opts.maxRunning);
+    const maxWorkingOverride = parseMaxOption("--max-working", opts.maxWorking);
     const result = await submitQueueJob({
       agent: "claude-code",
       boxName: opts.name ?? "",
@@ -2054,7 +2140,8 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
       prompt: opts.initialPrompt,
       agentArgs: claudeArgs,
       createOpts: pickCreateOpts(opts),
-      maxRunningOverride
+      maxRunningOverride,
+      maxWorkingOverride
     });
     outro2(
       `job ${result.job.id} queued (${String(result.runningCount)}/${String(result.maxConcurrent)} running); log: ${result.job.logPath}`
@@ -2112,10 +2199,18 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
     effectiveClaudeArgs = buildPromptArgs("claude-code", wiz.initialPrompt, claudeArgs);
   }
   let fromBranch;
+  let useBranch;
   try {
-    fromBranch = await resolveFromBranch(opts.fromBranch, { repo: opts.workspace });
+    ({ fromBranch, useBranch } = await resolveBranchSelection({
+      useBranch: opts.useBranch,
+      fromBranch: opts.fromBranch,
+      repo: opts.workspace,
+      providerName,
+      cloudUseCurrentBranch: cfg.effective.cloud.useCurrentBranch,
+      log: (m) => cmdLog.write(m)
+    }));
   } catch (err) {
-    if (err instanceof FromBranchError) {
+    if (err instanceof FromBranchError || err instanceof UseBranchError) {
       log9.error(err.message);
       cmdLog.close();
       process.exit(2);
@@ -2139,6 +2234,7 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
         vnc: { enabled: cfg.effective.box.vnc },
         limits: resolveLimits(cfg.effective.box, opts),
         fromBranch,
+        useBranch,
         projectRoot
       },
       binary: "claude",
@@ -2182,6 +2278,7 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
       useSnapshot,
       checkpointRef,
       fromBranch,
+      useBranch,
       image: cfg.effective.box.image,
       claudeConfig: { isolate: cfg.effective.box.isolateClaudeConfig },
       claudeEnv: resolved.env,
@@ -2438,7 +2535,7 @@ var claudeStartCommand = new Command2("start").description(
 ).option("--session-name <name>", "tmux session name (default from config; built-in: claude)").option(
   "--no-sync-config",
   "skip rsyncing the host's ~/.claude into the box's volume before starting (faster; use existing in-box state)"
-).option("--attach-in <mode>", ATTACH_IN_HELP).option("-i, --inline", INLINE_HELP).option("-b, --no-attach", NO_ATTACH_HELP).option(
+).option("--attach-in <mode>", ATTACH_IN_HELP).option("-i, --inline", INLINE_HELP).option("-d, --no-attach", NO_ATTACH_HELP).option(
   "-c, --continue",
   "teleport the most recent host Claude Code session for this cwd into the box and resume"
 ).option(
@@ -2554,6 +2651,17 @@ claudeCommand.addCommand(claudeLoginCommand);
 // src/commands/checkpoint.ts
 import { confirm as confirm4, isCancel as isCancel5, log as log10 } from "@clack/prompts";
 import { Command as Command3 } from "commander";
+var CLOUD_BACKENDS = ["daytona", "hetzner", "vercel"];
+async function cloudProviderFor(backend) {
+  switch (backend) {
+    case "daytona":
+      return (await import("./dist-CX5CGVEB.js")).daytonaProvider;
+    case "hetzner":
+      return (await import("./dist-GDHP34ZK.js")).hetznerProvider;
+    case "vercel":
+      return (await import("./dist-XML54CNB.js")).vercelProvider;
+  }
+}
 var CHECKPOINT_NOTICE = "Checkpoint in progress \u2014 the box will be unresponsive for a moment";
 var CHECKPOINT_NOTICE_TTL_MS = 66e4;
 async function projectRootFor(cwd, recordRoot) {
@@ -2639,10 +2747,16 @@ var lsSub = new Command3("ls").description("List this project's checkpoints (bot
     const projectRoot = (await findProjectRoot(process.cwd())).root;
     const cfg = await loadEffectiveConfig(projectRoot);
     const defDocker = resolveDefaultCheckpoint(cfg.effective, "docker");
-    const defDaytona = resolveDefaultCheckpoint(cfg.effective, "daytona");
     const dockerList = await listCheckpoints(projectRoot);
-    const daytonaList = await listCloudCheckpoints(projectRoot, "daytona");
-    if (dockerList.length === 0 && daytonaList.length === 0) {
+    const cloudLists = await Promise.all(
+      CLOUD_BACKENDS.map(async (backend) => ({
+        backend,
+        def: resolveDefaultCheckpoint(cfg.effective, backend),
+        items: await listCloudCheckpoints(projectRoot, backend)
+      }))
+    );
+    const totalCloud = cloudLists.reduce((n, c) => n + c.items.length, 0);
+    if (dockerList.length === 0 && totalCloud === 0) {
       process.stdout.write(`no checkpoints for ${projectRoot}
 `);
       return;
@@ -2654,12 +2768,14 @@ var lsSub = new Command3("ls").description("List this project's checkpoints (bot
 `
       );
     }
-    for (const c of daytonaList) {
-      const flag = c.name === defDaytona ? " *default" : "";
-      process.stdout.write(
-        `${c.name}  daytona (snapshot)  from ${c.manifest.sourceBoxName}  ${c.manifest.createdAt}${flag}
+    for (const { backend, def, items } of cloudLists) {
+      for (const c of items) {
+        const flag = c.name === def ? " *default" : "";
+        process.stdout.write(
+          `${c.name}  ${backend} (snapshot)  from ${c.manifest.sourceBoxName}  ${c.manifest.createdAt}${flag}
 `
-      );
+        );
+      }
     }
   } catch (err) {
     handleLifecycleError(err);
@@ -2667,13 +2783,16 @@ var lsSub = new Command3("ls").description("List this project's checkpoints (bot
 });
 var setDefaultSub = new Command3("set-default").description("Pin a checkpoint as the project default (box.defaultCheckpoint)").argument("[ref]", "checkpoint name (omit with --clear)").option("--clear", "unset the project default instead of setting one").option(
   "--provider <name>",
-  "set the default for only this provider (docker|daytona); without it, sets the cross-provider fallback"
+  "set the default for only this provider (docker|daytona|hetzner|vercel); without it, sets the cross-provider fallback"
 ).action(async (ref, opts) => {
   try {
     const projectRoot = (await findProjectRoot(process.cwd())).root;
     const providerArg = opts.provider;
-    if (providerArg !== void 0 && providerArg !== "docker" && providerArg !== "daytona") {
-      throw new Error(`unknown provider '${opts.provider ?? ""}' (known: docker, daytona)`);
+    const knownProviders = ["docker", ...CLOUD_BACKENDS];
+    if (providerArg !== void 0 && !knownProviders.includes(providerArg)) {
+      throw new Error(
+        `unknown provider '${opts.provider ?? ""}' (known: ${knownProviders.join(", ")})`
+      );
     }
     const configKey = defaultCheckpointConfigKey(providerArg);
     const label = providerArg ? `${providerArg} default checkpoint` : "project default checkpoint";
@@ -2692,11 +2811,16 @@ var setDefaultSub = new Command3("set-default").description("Pin a checkpoint as
     if (ref === void 0) {
       throw new Error("missing <ref> (or pass --clear to unset the default)");
     }
-    const checkDocker = providerArg === void 0 || providerArg === "docker";
-    const checkDaytona = providerArg === void 0 || providerArg === "daytona";
-    const dockerList = checkDocker ? await listCheckpoints(projectRoot) : [];
-    const daytonaList = checkDaytona ? await listCloudCheckpoints(projectRoot, "daytona") : [];
-    if (!dockerList.some((c) => c.name === ref) && !daytonaList.some((c) => c.name === ref)) {
+    const dockerHit = (providerArg === void 0 || providerArg === "docker") && (await listCheckpoints(projectRoot)).some((c) => c.name === ref);
+    let cloudHit = false;
+    for (const backend of CLOUD_BACKENDS) {
+      if (providerArg !== void 0 && providerArg !== backend) continue;
+      if (await resolveCloudCheckpoint(projectRoot, backend, ref)) {
+        cloudHit = true;
+        break;
+      }
+    }
+    if (!dockerHit && !cloudHit) {
       throw new Error(`checkpoint not found: ${ref} (see \`agentbox checkpoint ls\`)`);
     }
     const r = await setConfigValue("project", configKey, ref, projectRoot);
@@ -2709,8 +2833,12 @@ var setDefaultSub = new Command3("set-default").description("Pin a checkpoint as
 var rmSub = new Command3("rm").description("Delete a checkpoint (any provider that has it)").argument("<ref>", "checkpoint name").option("-y, --yes", "skip the confirmation prompt").option("--provider <name>", "delete only from this provider's store (default: all)").action(async (ref, opts) => {
   try {
     const projectRoot = (await findProjectRoot(process.cwd())).root;
-    const dockerInfo = !opts.provider || opts.provider === "docker";
-    const daytonaInfo = (!opts.provider || opts.provider === "daytona") && await resolveCloudCheckpoint(projectRoot, "daytona", ref);
+    const wantDocker = !opts.provider || opts.provider === "docker";
+    const cloudHits = [];
+    for (const backend of CLOUD_BACKENDS) {
+      if (opts.provider && opts.provider !== backend) continue;
+      if (await resolveCloudCheckpoint(projectRoot, backend, ref)) cloudHits.push(backend);
+    }
     if (!opts.yes) {
       const ok = await confirm4({ message: `Delete checkpoint ${ref}?`, initialValue: false });
       if (isCancel5(ok) || !ok) {
@@ -2719,7 +2847,7 @@ var rmSub = new Command3("rm").description("Delete a checkpoint (any provider th
       }
     }
     let any = false;
-    if (dockerInfo) {
+    if (wantDocker) {
       const removed = await removeCheckpoint(projectRoot, ref);
       if (removed) {
         any = true;
@@ -2727,16 +2855,16 @@ var rmSub = new Command3("rm").description("Delete a checkpoint (any provider th
 `);
       }
     }
-    if (daytonaInfo) {
-      const { daytonaProvider } = await import("./dist-L4LCG5SJ.js");
+    for (const backend of cloudHits) {
       try {
-        await daytonaProvider.checkpoint?.remove(projectRoot, ref);
+        const provider = await cloudProviderFor(backend);
+        await provider.checkpoint?.remove(projectRoot, ref);
         any = true;
-        process.stdout.write(`removed daytona checkpoint ${ref}
+        process.stdout.write(`removed ${backend} checkpoint ${ref}
 `);
       } catch (err) {
         log10.warn(
-          `daytona checkpoint remove failed: ${err instanceof Error ? err.message : String(err)}`
+          `${backend} checkpoint remove failed: ${err instanceof Error ? err.message : String(err)}`
         );
       }
     }
@@ -2747,7 +2875,8 @@ var rmSub = new Command3("rm").description("Delete a checkpoint (any provider th
       ["box.defaultCheckpoint", projectBox?.defaultCheckpoint, cfg.effective.box.defaultCheckpoint],
       ["box.defaultCheckpointDocker", projectBox?.defaultCheckpointDocker, cfg.effective.box.defaultCheckpointDocker],
       ["box.defaultCheckpointDaytona", projectBox?.defaultCheckpointDaytona, cfg.effective.box.defaultCheckpointDaytona],
-      ["box.defaultCheckpointHetzner", projectBox?.defaultCheckpointHetzner, cfg.effective.box.defaultCheckpointHetzner]
+      ["box.defaultCheckpointHetzner", projectBox?.defaultCheckpointHetzner, cfg.effective.box.defaultCheckpointHetzner],
+      ["box.defaultCheckpointVercel", projectBox?.defaultCheckpointVercel, cfg.effective.box.defaultCheckpointVercel]
     ];
     for (const [key, projectValue, effectiveValue] of defKeys) {
       if (projectValue === ref) {
@@ -2790,6 +2919,16 @@ async function runCloudCheckpointCreate(box, opts) {
     CHECKPOINT_NOTICE_TTL_MS
   );
   try {
+    if (opts.setDefault && provider.extractAgentCredentials) {
+      try {
+        const saved = await provider.extractAgentCredentials(box);
+        if (saved.length > 0) {
+          log10.info(`saved ${saved.join(", ")} login to ~/.agentbox for future boxes`);
+        }
+      } catch (err) {
+        log10.warn(`agent credential extract skipped: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
     log10.info(`capturing cloud snapshot '${name}' (this may take a few minutes)`);
     const result = await provider.checkpoint.create(box, name);
     log10.success(`checkpoint ${result.ref} (daytona snapshot) captured`);
@@ -3124,14 +3263,6 @@ import { Command as Command5 } from "commander";
 function reattachRef2(r) {
   return typeof r.projectIndex === "number" ? String(r.projectIndex) : r.name;
 }
-function parseMaxRunningOption2(raw) {
-  if (raw === void 0) return void 0;
-  const n = Number(raw);
-  if (!Number.isInteger(n) || n <= 0) {
-    throw new Error(`--max-running: expected a positive integer, got "${raw}"`);
-  }
-  return n;
-}
 function pickCodexCreateOpts(opts) {
   return {
     workspace: opts.workspace,
@@ -3245,15 +3376,21 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
 ).option(
   "--from-branch <ref>",
   "base the box's per-box branch on this ref (branch / tag / SHA) instead of HEAD. Branch/tag names are fetched from origin first."
+).option(
+  "-b, --use-branch <name>",
+  "reuse an existing branch directly instead of forking agentbox/<box-name>. Commits/pushes flow straight to it. Docker fails if the host already has it checked out. Mutually exclusive with --from-branch."
 ).option(
   "-v, --verbose",
   "bypass the spinner and stream raw provider output to stderr. The same content always lands in ~/.agentbox/logs/codex.log."
-).option("--attach-in <mode>", ATTACH_IN_HELP).option("--inline", INLINE_HELP).option("-b, --no-attach", NO_ATTACH_HELP).option(
+).option("--attach-in <mode>", ATTACH_IN_HELP).option("--inline", INLINE_HELP).option("-d, --no-attach", NO_ATTACH_HELP).option(
   "-i, --initial-prompt <text>",
   "seed the codex session with this initial user turn and run in background (no attach). Jobs go through the host-wide queue (queue.maxConcurrent)."
 ).option(
   "--max-running <n>",
   "per-invocation override of queue.maxConcurrent; only honored when `-i` is set"
+).option(
+  "--max-working <n>",
+  "per-invocation override of queue.maxWorking; only honored when `-i` is set"
 ).option(
   "-c, --continue",
   "teleport the most recent host Codex session for this cwd into the box and resume from it"
@@ -3326,7 +3463,8 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
       }
       throw err;
     }
-    const maxRunningOverride = parseMaxRunningOption2(opts.maxRunning);
+    const maxRunningOverride = parseMaxOption("--max-running", opts.maxRunning);
+    const maxWorkingOverride = parseMaxOption("--max-working", opts.maxWorking);
     const result = await submitQueueJob({
       agent: "codex",
       boxName: opts.name ?? "",
@@ -3334,7 +3472,8 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
       prompt: opts.initialPrompt,
       agentArgs: codexArgs,
       createOpts: pickCodexCreateOpts(opts),
-      maxRunningOverride
+      maxRunningOverride,
+      maxWorkingOverride
     });
     outro3(
       `job ${result.job.id} queued (${String(result.runningCount)}/${String(result.maxConcurrent)} running); log: ${result.job.logPath}`
@@ -3363,10 +3502,18 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
     process.exit(1);
   }
   let fromBranch;
+  let useBranch;
   try {
-    fromBranch = await resolveFromBranch(opts.fromBranch, { repo: opts.workspace });
+    ({ fromBranch, useBranch } = await resolveBranchSelection({
+      useBranch: opts.useBranch,
+      fromBranch: opts.fromBranch,
+      repo: opts.workspace,
+      providerName,
+      cloudUseCurrentBranch: cfg.effective.cloud.useCurrentBranch,
+      log: (m) => cmdLog.write(m)
+    }));
   } catch (err) {
-    if (err instanceof FromBranchError) {
+    if (err instanceof FromBranchError || err instanceof UseBranchError) {
       log12.error(err.message);
       cmdLog.close();
       process.exit(2);
@@ -3389,6 +3536,7 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
         vnc: { enabled: cfg.effective.box.vnc },
         limits: resolveLimits(cfg.effective.box, opts),
         fromBranch,
+        useBranch,
         projectRoot
       },
       binary: "codex",
@@ -3439,6 +3587,7 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
       useSnapshot,
       checkpointRef,
       fromBranch,
+      useBranch,
       image: cfg.effective.box.image,
       codexConfig: { isolate: cfg.effective.box.isolateCodexConfig },
       withPlaywright,
@@ -3661,7 +3810,7 @@ var codexStartCommand = new Command5("start").description(
 ).option("--session-name <name>", "tmux session name (default from config; built-in: codex)").option(
   "--no-sync-config",
   "skip rsyncing the host's ~/.codex into the box's volume before starting (faster; use existing in-box state)"
-).option("--attach-in <mode>", ATTACH_IN_HELP).option("-i, --inline", INLINE_HELP).option("-b, --no-attach", NO_ATTACH_HELP).option(
+).option("--attach-in <mode>", ATTACH_IN_HELP).option("-i, --inline", INLINE_HELP).option("-d, --no-attach", NO_ATTACH_HELP).option(
   "-c, --continue",
   "teleport the most recent host Codex session for this cwd into the box and resume"
 ).option(
@@ -3782,14 +3931,6 @@ import { Command as Command6 } from "commander";
 function reattachRef3(r) {
   return typeof r.projectIndex === "number" ? String(r.projectIndex) : r.name;
 }
-function parseMaxRunningOption3(raw) {
-  if (raw === void 0) return void 0;
-  const n = Number(raw);
-  if (!Number.isInteger(n) || n <= 0) {
-    throw new Error(`--max-running: expected a positive integer, got "${raw}"`);
-  }
-  return n;
-}
 function pickOpencodeCreateOpts(opts) {
   return {
     workspace: opts.workspace,
@@ -3906,15 +4047,21 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
 ).option(
   "--from-branch <ref>",
   "base the box's per-box branch on this ref (branch / tag / SHA) instead of HEAD. Branch/tag names are fetched from origin first."
+).option(
+  "-b, --use-branch <name>",
+  "reuse an existing branch directly instead of forking agentbox/<box-name>. Commits/pushes flow straight to it. Docker fails if the host already has it checked out. Mutually exclusive with --from-branch."
 ).option(
   "-v, --verbose",
   "bypass the spinner and stream raw provider output to stderr. The same content always lands in ~/.agentbox/logs/opencode.log."
-).option("--attach-in <mode>", ATTACH_IN_HELP).option("--inline", INLINE_HELP).option("-b, --no-attach", NO_ATTACH_HELP).option(
+).option("--attach-in <mode>", ATTACH_IN_HELP).option("--inline", INLINE_HELP).option("-d, --no-attach", NO_ATTACH_HELP).option(
   "-i, --initial-prompt <text>",
   "seed the opencode session with this initial user turn and run in background (no attach). Jobs go through the host-wide queue (queue.maxConcurrent)."
 ).option(
   "--max-running <n>",
   "per-invocation override of queue.maxConcurrent; only honored when `-i` is set"
+).option(
+  "--max-working <n>",
+  "per-invocation override of queue.maxWorking; only honored when `-i` is set"
 ).option(
   "-c, --continue",
   "session teleport (not yet supported for opencode in v1; emits a friendly error)"
@@ -3972,7 +4119,8 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
       }
       throw err;
     }
-    const maxRunningOverride = parseMaxRunningOption3(opts.maxRunning);
+    const maxRunningOverride = parseMaxOption("--max-running", opts.maxRunning);
+    const maxWorkingOverride = parseMaxOption("--max-working", opts.maxWorking);
     const result = await submitQueueJob({
       agent: "opencode",
       boxName: opts.name ?? "",
@@ -3980,7 +4128,8 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
       prompt: opts.initialPrompt,
       agentArgs: opencodeArgs,
       createOpts: pickOpencodeCreateOpts(opts),
-      maxRunningOverride
+      maxRunningOverride,
+      maxWorkingOverride
     });
     outro4(
       `job ${result.job.id} queued (${String(result.runningCount)}/${String(result.maxConcurrent)} running); log: ${result.job.logPath}`
@@ -4009,10 +4158,18 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
     process.exit(1);
   }
   let fromBranch;
+  let useBranch;
   try {
-    fromBranch = await resolveFromBranch(opts.fromBranch, { repo: opts.workspace });
+    ({ fromBranch, useBranch } = await resolveBranchSelection({
+      useBranch: opts.useBranch,
+      fromBranch: opts.fromBranch,
+      repo: opts.workspace,
+      providerName,
+      cloudUseCurrentBranch: cfg.effective.cloud.useCurrentBranch,
+      log: (m) => cmdLog.write(m)
+    }));
   } catch (err) {
-    if (err instanceof FromBranchError) {
+    if (err instanceof FromBranchError || err instanceof UseBranchError) {
       log13.error(err.message);
       cmdLog.close();
       process.exit(2);
@@ -4035,6 +4192,7 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
         vnc: { enabled: cfg.effective.box.vnc },
         limits: resolveLimits(cfg.effective.box, opts),
         fromBranch,
+        useBranch,
         projectRoot
       },
       binary: "opencode",
@@ -4067,6 +4225,7 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
       useSnapshot,
       checkpointRef,
       fromBranch,
+      useBranch,
       image: cfg.effective.box.image,
       opencodeConfig: { isolate: cfg.effective.box.isolateOpencodeConfig },
       withPlaywright,
@@ -4231,7 +4390,7 @@ var opencodeStartCommand = new Command6("start").description(
 ).option("--session-name <name>", "tmux session name (default from config; built-in: opencode)").option(
   "--no-sync-config",
   "skip rsyncing the host's OpenCode config into the box's volume before starting (faster; use existing in-box state)"
-).option("--attach-in <mode>", ATTACH_IN_HELP).option("-i, --inline", INLINE_HELP).option("-b, --no-attach", NO_ATTACH_HELP).option(
+).option("--attach-in <mode>", ATTACH_IN_HELP).option("-i, --inline", INLINE_HELP).option("-d, --no-attach", NO_ATTACH_HELP).option(
   "-c, --continue",
   "session teleport (not yet supported for opencode in v1; emits a friendly error)"
 ).option(
@@ -4769,6 +4928,9 @@ var createCommand = new Command9("create").description("Create and start a new a
 ).option(
   "--from-branch <ref>",
   "base the box's per-box branch on this ref (branch / tag / SHA) instead of HEAD. Branch/tag names are fetched from origin first."
+).option(
+  "-b, --use-branch <name>",
+  "reuse an existing branch directly instead of forking agentbox/<box-name>. Commits/pushes flow straight to it. Docker fails if the host already has it checked out. Mutually exclusive with --from-branch."
 ).option("-y, --yes", "skip prompts, accept defaults").option(
   "--carry-yes",
   "auto-approve agentbox.yaml's `carry:` block (also AGENTBOX_CARRY_YES=1). Required for non-TTY use of `-y` when carry: is non-empty."
@@ -4857,11 +5019,22 @@ var createCommand = new Command9("create").description("Create and start a new a
     const withPlaywright = cfg.effective.box.withPlaywright || cfg.effective.browser.default !== "agent-browser";
     const provider = await providerForCreate({ flag: opts.provider, config: cfg.effective });
     let fromBranch;
+    let useBranch;
     try {
-      fromBranch = await resolveFromBranch(opts.fromBranch, { repo: opts.workspace });
+      ({ fromBranch, useBranch } = await resolveBranchSelection({
+        useBranch: opts.useBranch,
+        fromBranch: opts.fromBranch,
+        repo: opts.workspace,
+        providerName: provider.name,
+        cloudUseCurrentBranch: cfg.effective.cloud.useCurrentBranch,
+        log: (m2) => {
+          s.message(m2);
+          cmdLog.write(m2);
+        }
+      }));
     } catch (err) {
-      if (err instanceof FromBranchError) {
-        s.stop("aborting: invalid --from-branch");
+      if (err instanceof FromBranchError || err instanceof UseBranchError) {
+        s.stop("aborting: invalid branch selection");
         log15.error(err.message);
         cmdLog.close();
         process.exit(2);
@@ -4881,6 +5054,7 @@ var createCommand = new Command9("create").description("Create and start a new a
       limits: resolveLimits(cfg.effective.box, opts),
       bundleDepth: cfg.effective.box.bundleDepth,
       fromBranch,
+      useBranch,
       projectRoot,
       onLog: (line) => {
         s.message(line);
@@ -4890,7 +5064,14 @@ var createCommand = new Command9("create").description("Create and start a new a
         useSnapshot,
         sharedCache: cfg.effective.box.dockerCacheShared,
         portless: portlessEnabled,
-        portlessStateDir: cfg.effective.portless.stateDir || void 0
+        portlessStateDir: cfg.effective.portless.stateDir || void 0,
+        // Vercel-only sizing (box.vercelVcpus / vercelTimeoutMs). The cloud
+        // scaffold reads these as overrides; other providers ignore them.
+        ...provider.name === "vercel" ? {
+          vcpus: cfg.effective.box.vercelVcpus,
+          timeoutMs: cfg.effective.box.vercelTimeoutMs,
+          networkPolicy: cfg.effective.box.vercelNetworkPolicy
+        } : {}
       }
     });
     s.stop(`box ${result.record.container} ready`);
@@ -4945,7 +5126,7 @@ var createCommand = new Command9("create").description("Create and start a new a
     }
     outro5("done");
     if (attachClaudeAfter) {
-      const { cloudAgentAttach: cloudAgentAttach2 } = await import("./_cloud-attach-T727ZPRV.js");
+      const { cloudAgentAttach: cloudAgentAttach2 } = await import("./_cloud-attach-ZXBCNWJX.js");
       await cloudAgentAttach2({
         box: result.record,
         binary: "claude",
@@ -5501,6 +5682,9 @@ var Compositor = class {
    * the poll respawn so it can't interrupt the transition). */
   busy = false;
   layout;
+  /** Last host terminal/tab title we emitted, to dedupe OSC writes across the
+   *  frequent (spinner-driven) drawChrome calls. */
+  lastTitle = null;
   prevRows = null;
   renderTimer = null;
   pollTimer = null;
@@ -5522,6 +5706,7 @@ var Compositor = class {
   };
   async run() {
     this.out.write("\x1B[?1049h\x1B[?25l\x1B[2J" + MOUSE_ENABLE_SEQ + EXT_KEYS_ENABLE_SEQ);
+    pushTerminalTitle(this.out);
     if (this.inp.isTTY) this.inp.setRawMode(true);
     this.inp.resume();
     this.inp.on("data", this.onData);
@@ -6116,7 +6301,20 @@ var Compositor = class {
       this.out.write(s + SYNC_END);
     }
   }
+  /** Drive the host terminal/tab title from the selected box:
+   *  `AgentBox: <session title | box name>`, or just `AgentBox` for the
+   *  synthetic "+ New box" entry / no selection. Deduped via {@link lastTitle}. */
+  updateTitle() {
+    if (this.tornDown) return;
+    const box = this.selectedBox();
+    const inner = box && box.id !== NEW_BOX_ID ? box.state === "running" && box.sessionTitle ? stripTitleGlyph(box.sessionTitle) : box.name : void 0;
+    const title = inner ? `AgentBox: ${inner}` : "AgentBox";
+    if (title === this.lastTitle) return;
+    this.lastTitle = title;
+    setTerminalTitle(title, this.out);
+  }
   drawChrome() {
+    this.updateTitle();
     if (this.tornDown || this.layout.tooSmall) return;
     const { sidebar, sepX, statusY } = this.layout;
     const decorate = this.activePrompts.size > 0 || this.activeNotices.size > 0;
@@ -6215,6 +6413,7 @@ var Compositor = class {
     if (this.inp.isTTY) this.inp.setRawMode(false);
     this.inp.pause();
     this.out.write(EXT_KEYS_DISABLE_SEQ + MOUSE_DISABLE_SEQ + "\x1B[?25h\x1B[0m\x1B[?1049l");
+    popTerminalTitle(this.out);
     this.resolveDone?.();
   }
 };
@@ -6933,30 +7132,106 @@ var hetznerCommand = new Command13("hetzner").description(
   "Hetzner Cloud VPS provider \u2014 credentials, firewall, plus sugar for `--provider hetzner` (e.g. `agentbox hetzner create|claude|codex|opencode`)"
 ).addCommand(loginSub2, { isDefault: true }).addCommand(firewallSub);
 
-// src/commands/destroy.ts
-import { confirm as confirm7, isCancel as isCancel8, log as log19 } from "@clack/prompts";
+// ../../packages/sandbox-vercel/dist/cli.js
+import { log as log19 } from "@clack/prompts";
 import { Command as Command14 } from "commander";
-var destroyCommand = new Command14("destroy").alias("rm").description("Destroy a box and discard its container writable layer (where /workspace lived)").argument(
+function reportError3(err) {
+  const message = err instanceof Error ? err.message : String(err);
+  log19.error(message);
+  process.exitCode = 1;
+}
+function relativeExpiry(expiresAt) {
+  const deltaMs = expiresAt * 1e3 - Date.now();
+  if (deltaMs <= 0) return "expired";
+  const mins = Math.round(deltaMs / 6e4);
+  if (mins < 60) return `expires in ${mins}m`;
+  return `expires in ${Math.round(mins / 60)}h`;
+}
+async function printStatus3() {
+  const s = readVercelCredStatus();
+  if (s.auth === "none") {
+    process.stdout.write(
+      "vercel: not configured\n  run `agentbox vercel login` to set up credentials\n"
+    );
+    return;
+  }
+  const lines = ["vercel: configured"];
+  if (s.auth === "cli") {
+    const det = await detectSbx();
+    lines.push("  auth:   Vercel CLI (sandbox) login");
+    lines.push(`  cli:    ${det.installed ? `installed${det.version ? ` ${det.version}` : ""}` : `not installed \u2014 run \`${installSbxHint()}\``}`);
+    if (s.cli) {
+      if (!s.cli.loggedIn) {
+        lines.push("  session: logged out \u2014 run `agentbox vercel login`");
+      } else {
+        let tokenLine = `  token:  ${s.token ? maskKey3(s.token) : "(live, from CLI store)"}`;
+        if (s.cli.expiresAt) tokenLine += `  (${relativeExpiry(s.cli.expiresAt)})`;
+        else tokenLine += "  (no expiry recorded \u2014 will refresh on use)";
+        lines.push(tokenLine);
+      }
+      lines.push(`  store:  ${s.cli.authPath}`);
+    }
+  } else if (s.auth === "oidc") {
+    lines.push("  auth:   OIDC token (VERCEL_OIDC_TOKEN)");
+  } else {
+    lines.push("  auth:   access token");
+    if (s.token) lines.push(`  token:  ${maskKey3(s.token)}`);
+  }
+  lines.push(`  source: ${s.source}`);
+  if (s.teamId) lines.push(`  team:   ${s.teamId}`);
+  if (s.projectId) lines.push(`  project: ${s.projectId}`);
+  if (s.source === "secrets.env" || s.source === "cli-store") {
+    lines.push(`  file:   ${secretsPath3()}`);
+  }
+  process.stdout.write(lines.join("\n") + "\n");
+}
+var loginSub3 = new Command14("login").description("Set up (or rotate) Vercel credentials for sandbox boxes").option("--status", "show what is currently configured (masked) and exit").action(async (opts) => {
+  try {
+    if (opts.status) {
+      await printStatus3();
+      return;
+    }
+    if (!process.stdin.isTTY) {
+      process.stderr.write(
+        "vercel login needs an interactive terminal \u2014 set the VERCEL_TOKEN trio (or VERCEL_OIDC_TOKEN) in the environment or in ~/.agentbox/secrets.env for non-interactive use.\n"
+      );
+      process.exitCode = 1;
+      return;
+    }
+    await ensureVercelCredentials({ force: true });
+  } catch (err) {
+    reportError3(err);
+  }
+});
+var vercelCommand = new Command14("vercel").description(
+  "Vercel Sandbox provider \u2014 credentials, plus sugar for `--provider vercel` (e.g. `agentbox vercel create|claude|codex|opencode`)"
+).addCommand(loginSub3, { isDefault: true });
+
+// src/commands/destroy.ts
+import { confirm as confirm7, isCancel as isCancel8, log as log20 } from "@clack/prompts";
+import { Command as Command15 } from "commander";
+var destroyCommand = new Command15("destroy").alias("rm").description("Destroy a box and discard its container writable layer (where /workspace lived)").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).option("-y, --yes", "skip the confirmation prompt").option("--keep-snapshot", "don't delete the snapshot dir under ~/.agentbox/snapshots/").action(async (idOrName, opts) => {
   try {
     const box = await resolveBoxOrExit(idOrName);
     if (!opts.yes) {
-      log19.warn(
-        "This will wipe the container writable layer \u2014 /workspace contents and agent work-in-progress are lost."
-      );
-      log19.info(`id:        ${box.id}`);
-      log19.info(`container: ${box.container}`);
+      log20.warn("Will also wipe the box volume and agent work-in-progress");
+      const rootBranch = box.gitWorktrees?.find((w) => w.kind === "root")?.branch;
+      const lines = [box.name];
+      if (rootBranch) lines.push(`branch:    ${rootBranch}`);
+      lines.push(`project: ${box.workspacePath}`);
       if (box.snapshotDir) {
-        log19.info(`snapshot:  ${box.snapshotDir}${opts.keepSnapshot ? " (will be kept)" : ""}`);
+        lines.push(`snapshot:  ${box.snapshotDir}${opts.keepSnapshot ? " (will be kept)" : ""}`);
       }
+      log20.info(lines.join("\n"));
       const ok = await confirm7({
         message: "Destroy this box?",
         initialValue: false
       });
       if (isCancel8(ok) || !ok) {
-        log19.info("cancelled");
+        log20.info("cancelled");
         return;
       }
     }
@@ -6989,17 +7264,17 @@ var destroyCommand = new Command14("destroy").alias("rm").description("Destroy a
 });
 
 // src/commands/download.ts
-import { confirm as confirm13, isCancel as isCancel14, log as log25 } from "@clack/prompts";
-import { Command as Command20 } from "commander";
+import { confirm as confirm13, isCancel as isCancel14, log as log26 } from "@clack/prompts";
+import { Command as Command21 } from "commander";
 
 // src/commands/download-claude.ts
-import { confirm as confirm8, isCancel as isCancel9, log as log20 } from "@clack/prompts";
-import { Command as Command15 } from "commander";
+import { confirm as confirm8, isCancel as isCancel9, log as log21 } from "@clack/prompts";
+import { Command as Command16 } from "commander";
 function tag(item) {
   const noun = item.category === "plugins" ? "plugin" : item.category.replace(/s$/, "");
   return `  ${item.category}/${item.name} (new ${noun})`;
 }
-var downloadClaudeCommand = new Command15("claude").description(
+var downloadClaudeCommand = new Command16("claude").description(
   "Download box-installed Claude skills/plugins/agents/commands back to host ~/.claude (additive)"
 ).argument(
   "[box]",
@@ -7009,7 +7284,7 @@ var downloadClaudeCommand = new Command15("claude").description(
     const box = await resolveBoxOrExit(idOrName);
     const volume = box.claudeConfigVolume ?? resolveClaudeVolume({ isolate: false, boxId: box.id }).volume;
     if (volume === SHARED_CLAUDE_VOLUME) {
-      log20.warn(
+      log21.warn(
         `Reading the shared ${SHARED_CLAUDE_VOLUME} volume \u2014 it aggregates Claude extensions installed in ANY box, not just ${box.name}.`
       );
     }
@@ -7039,7 +7314,7 @@ var downloadClaudeCommand = new Command15("claude").description(
         initialValue: false
       });
       if (isCancel9(ok) || !ok) {
-        log20.info("cancelled");
+        log21.info("cancelled");
         return;
       }
     }
@@ -7054,9 +7329,9 @@ var downloadClaudeCommand = new Command15("claude").description(
 });
 
 // src/commands/download-codex.ts
-import { confirm as confirm9, isCancel as isCancel10, log as log21 } from "@clack/prompts";
-import { Command as Command16 } from "commander";
-var downloadCodexCommand = new Command16("codex").description(
+import { confirm as confirm9, isCancel as isCancel10, log as log22 } from "@clack/prompts";
+import { Command as Command17 } from "commander";
+var downloadCodexCommand = new Command17("codex").description(
   "Download box-side Codex config/auth (config.toml, auth.json, prompts) back to host ~/.codex (additive)"
 ).argument(
   "[box]",
@@ -7066,7 +7341,7 @@ var downloadCodexCommand = new Command16("codex").description(
     const box = await resolveBoxOrExit(idOrName);
     const volume = box.codexConfigVolume ?? resolveCodexVolume({ isolate: false, boxId: box.id }).volume;
     if (volume === SHARED_CODEX_VOLUME) {
-      log21.warn(
+      log22.warn(
         `Reading the shared ${SHARED_CODEX_VOLUME} volume \u2014 it aggregates Codex config from ANY box, not just ${box.name}.`
       );
     }
@@ -7092,7 +7367,7 @@ var downloadCodexCommand = new Command16("codex").description(
         initialValue: false
       });
       if (isCancel10(ok) || !ok) {
-        log21.info("cancelled");
+        log22.info("cancelled");
         return;
       }
     }
@@ -7105,9 +7380,9 @@ var downloadCodexCommand = new Command16("codex").description(
 });
 
 // src/commands/download-opencode.ts
-import { confirm as confirm10, isCancel as isCancel11, log as log22 } from "@clack/prompts";
-import { Command as Command17 } from "commander";
-var downloadOpencodeCommand = new Command17("opencode").description(
+import { confirm as confirm10, isCancel as isCancel11, log as log23 } from "@clack/prompts";
+import { Command as Command18 } from "commander";
+var downloadOpencodeCommand = new Command18("opencode").description(
   "Download box-side OpenCode config/auth (auth.json, opencode.json, agents, commands, themes) back to host ~/.config + ~/.local/share opencode (additive)"
 ).argument(
   "[box]",
@@ -7117,7 +7392,7 @@ var downloadOpencodeCommand = new Command17("opencode").description(
     const box = await resolveBoxOrExit(idOrName);
     const volume = box.opencodeConfigVolume ?? resolveOpencodeVolume({ isolate: false, boxId: box.id }).volume;
     if (volume === SHARED_OPENCODE_VOLUME) {
-      log22.warn(
+      log23.warn(
         `Reading the shared ${SHARED_OPENCODE_VOLUME} volume \u2014 it aggregates OpenCode config from ANY box, not just ${box.name}.`
       );
     }
@@ -7143,7 +7418,7 @@ var downloadOpencodeCommand = new Command17("opencode").description(
         initialValue: false
       });
       if (isCancel11(ok) || !ok) {
-        log22.info("cancelled");
+        log23.info("cancelled");
         return;
       }
     }
@@ -7156,8 +7431,8 @@ var downloadOpencodeCommand = new Command17("opencode").description(
 });
 
 // src/commands/download-config.ts
-import { confirm as confirm11, isCancel as isCancel12, log as log23 } from "@clack/prompts";
-import { Command as Command18 } from "commander";
+import { confirm as confirm11, isCancel as isCancel12, log as log24 } from "@clack/prompts";
+import { Command as Command19 } from "commander";
 function tagChange(line) {
   const sp = line.indexOf(" ");
   const code = sp === -1 ? line : line.slice(0, sp);
@@ -7166,7 +7441,7 @@ function tagChange(line) {
   return `  ${path} ${isNew ? "(new)" : "(overwrites host)"}`;
 }
 var CONFIG_PATTERNS = ["agentbox.yaml"];
-var downloadConfigCommand = new Command18("config").description("Download agentbox.yaml box -> host").argument(
+var downloadConfigCommand = new Command19("config").description("Download agentbox.yaml box -> host").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).option("-y, --yes", "skip the confirmation prompt").option("--dry-run", "list matched files and exit; don't write").option("--no-refresh", "skip the box->scratch-dir rsync step").action(async (idOrName, opts) => {
@@ -7174,15 +7449,15 @@ var downloadConfigCommand = new Command18("config").description("Download agentb
     const box = await resolveBoxOrExit(idOrName);
     const insp = await inspectBox(box.id);
     if (insp.state === "paused") {
-      log23.info("box is paused; unpausing");
+      log24.info("box is paused; unpausing");
       await unpauseBox(box.id);
     } else if (insp.state === "stopped") {
-      log23.info("box is stopped; starting");
+      log24.info("box is stopped; starting");
       await startBox(box.id);
     } else if (insp.state === "missing") {
       throw new Error(`box ${box.name} has no container; was it destroyed?`);
     }
-    log23.info(`agentbox.yaml bypasses gitignore and copies directly into ${box.workspacePath}`);
+    log24.info(`agentbox.yaml bypasses gitignore and copies directly into ${box.workspacePath}`);
     const preview = await pullToHost(box, {
       dryRun: true,
       respectGitignore: false,
@@ -7210,7 +7485,7 @@ var downloadConfigCommand = new Command18("config").description("Download agentb
         initialValue: false
       });
       if (isCancel12(ok) || !ok) {
-        log23.info("cancelled");
+        log24.info("cancelled");
         return;
       }
     }
@@ -7232,8 +7507,8 @@ var downloadConfigCommand = new Command18("config").description("Download agentb
 });
 
 // src/commands/download-env.ts
-import { confirm as confirm12, isCancel as isCancel13, log as log24 } from "@clack/prompts";
-import { Command as Command19 } from "commander";
+import { confirm as confirm12, isCancel as isCancel13, log as log25 } from "@clack/prompts";
+import { Command as Command20 } from "commander";
 function tagChange2(line) {
   const sp = line.indexOf(" ");
   const code = sp === -1 ? line : line.slice(0, sp);
@@ -7241,7 +7516,7 @@ function tagChange2(line) {
   const isNew = /^>f\++$/.test(code);
   return `  ${path} ${isNew ? "(new)" : "(overwrites host)"}`;
 }
-var downloadEnvCommand = new Command19("env").description(
+var downloadEnvCommand = new Command20("env").description(
   "Download gitignored env/config files (.env*, .envrc, secrets.toml, agentbox.yaml, ...) box -> host"
 ).argument(
   "[box]",
@@ -7256,15 +7531,15 @@ var downloadEnvCommand = new Command19("env").description(
     const box = await resolveBoxOrExit(idOrName);
     const insp = await inspectBox(box.id);
     if (insp.state === "paused") {
-      log24.info("box is paused; unpausing");
+      log25.info("box is paused; unpausing");
       await unpauseBox(box.id);
     } else if (insp.state === "stopped") {
-      log24.info("box is stopped; starting");
+      log25.info("box is stopped; starting");
       await startBox(box.id);
     } else if (insp.state === "missing") {
       throw new Error(`box ${box.name} has no container; was it destroyed?`);
     }
-    log24.info(
+    log25.info(
       `env/config files bypass gitignore and copy directly into ${box.workspacePath}`
     );
     const patterns = [...DEFAULT_ENV_PATTERNS, ...opts.pattern];
@@ -7295,7 +7570,7 @@ var downloadEnvCommand = new Command19("env").description(
         initialValue: false
       });
       if (isCancel13(ok) || !ok) {
-        log24.info("cancelled");
+        log25.info("cancelled");
         return;
       }
     }
@@ -7317,7 +7592,7 @@ var downloadEnvCommand = new Command19("env").description(
 });
 
 // src/commands/download.ts
-var downloadCommand = new Command20("download").enablePositionalOptions().description("Download a box's /workspace back into your host workspace dir (gitignore-aware)").argument(
+var downloadCommand = new Command21("download").enablePositionalOptions().description("Download a box's /workspace back into your host workspace dir (gitignore-aware)").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).option("-y, --yes", "skip the confirmation prompt").option("--dry-run", "print the change list and exit; don't write").option(
@@ -7343,7 +7618,7 @@ var downloadCommand = new Command20("download").enablePositionalOptions().descri
         throw new Error("cloud download does not yet support --dry-run; omit to bulk-pull /workspace.");
       }
       if (!opts.respectGitignore || opts.includeNodeModules || opts.withEnv || opts.pattern.length > 0) {
-        log25.warn(
+        log26.warn(
           "cloud download ignores gitignore/--with-env/--pattern filters in v1 \u2014 pulling the whole /workspace tree (Phase 6 polish)."
         );
       }
@@ -7353,7 +7628,7 @@ var downloadCommand = new Command20("download").enablePositionalOptions().descri
           initialValue: false
         });
         if (isCancel14(ok) || !ok) {
-          log25.info("cancelled");
+          log26.info("cancelled");
           return;
         }
       }
@@ -7372,17 +7647,17 @@ var downloadCommand = new Command20("download").enablePositionalOptions().descri
     }
     const insp = await inspectBox(box.id);
     if (insp.state === "paused") {
-      log25.info("box is paused; unpausing");
+      log26.info("box is paused; unpausing");
       await unpauseBox(box.id);
     } else if (insp.state === "stopped") {
-      log25.info("box is stopped; starting");
+      log26.info("box is stopped; starting");
       await startBox(box.id);
     } else if (insp.state === "missing") {
       throw new Error(`box ${box.name} has no container; was it destroyed?`);
     }
     const rootWorktree = box.gitWorktrees?.find((w) => w.kind === "root");
     if (rootWorktree) {
-      log25.warn(
+      log26.warn(
         `This box has been committing to branch \`${rootWorktree.branch}\` in a separate worktree.
 For a git-aware merge instead of a file copy, run from your checkout:
   git merge ${rootWorktree.branch}
@@ -7418,7 +7693,7 @@ Continuing with rsync into ${box.workspacePath}`
         initialValue: false
       });
       if (isCancel14(ok) || !ok) {
-        log25.info("cancelled");
+        log26.info("cancelled");
         return;
       }
     }
@@ -7446,8 +7721,8 @@ downloadCommand.addCommand(downloadOpencodeCommand);
 downloadCommand.addCommand(downloadConfigCommand);
 
 // src/commands/drive.ts
-import { log as log26 } from "@clack/prompts";
-import { Command as Command21 } from "commander";
+import { log as log27 } from "@clack/prompts";
+import { Command as Command22 } from "commander";
 
 // src/lib/drive/keys.ts
 var NAMED = {
@@ -7629,11 +7904,11 @@ var SessionNotFoundError = class extends Error {
 // src/commands/drive.ts
 var PROMPT_ENTER_DELAY_MS = 200;
 var POLL_INTERVAL_MS2 = 250;
-var driveCommand = new Command21("drive").description(
+var driveCommand = new Command22("drive").description(
   "Drive a running tmux session inside a box: snapshot the screen, send keystrokes, type text, or wait for output. Targets the agent session by default (claude \u2192 codex \u2192 opencode)."
 );
 var sessionOption = ["--session <name>", "tmux session to target (default: first running agent session)"];
-var driveSnapshotCommand = new Command21("snapshot").description("Print the rendered terminal contents of the box's active tmux session.").argument(
+var driveSnapshotCommand = new Command22("snapshot").description("Print the rendered terminal contents of the box's active tmux session.").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).option(sessionOption[0], sessionOption[1]).option("--ansi", "preserve ANSI color/style escape sequences (default: plain text)").option("--with-cursor", "include cursor coordinates and pane size (implies --json)").option("--rows <range>", 'inclusive row range "FROM:TO" (negative numbers walk into scrollback)').option("--json", "emit a JSON envelope { session, cols, rows, cursor?, screen }").action(async (boxRef, opts) => {
@@ -7662,7 +7937,7 @@ var driveSnapshotCommand = new Command21("snapshot").description("Print the rend
     handleDriveError(err);
   }
 });
-var driveKeypressCommand = new Command21("keypress").description('Send keystrokes parsed via the DSL (e.g. "<C-a>q", "ls<Enter>"). Each arg is concatenated with no spaces.').argument(
+var driveKeypressCommand = new Command22("keypress").description('Send keystrokes parsed via the DSL (e.g. "<C-a>q", "ls<Enter>"). Each arg is concatenated with no spaces.').argument(
   "<box>",
   "box ref: project index, id, id prefix, name, or container"
 ).argument("<keys...>", "one or more DSL tokens / literal text; `<<` escapes a literal `<`").option(sessionOption[0], sessionOption[1]).action(async (boxRef, keys, opts) => {
@@ -7676,7 +7951,7 @@ var driveKeypressCommand = new Command21("keypress").description('Send keystroke
     handleDriveError(err);
   }
 });
-var driveSendTextCommand = new Command21("send-text").description("Type literal text into the session (no DSL parsing, no trailing Enter).").argument("<box>", "box ref").argument("<text>", "literal text to type").option(sessionOption[0], sessionOption[1]).action(async (boxRef, text, opts) => {
+var driveSendTextCommand = new Command22("send-text").description("Type literal text into the session (no DSL parsing, no trailing Enter).").argument("<box>", "box ref").argument("<text>", "literal text to type").option(sessionOption[0], sessionOption[1]).action(async (boxRef, text, opts) => {
   try {
     const box = await resolveBoxOrExit(boxRef);
     const provider = await providerForBox(box);
@@ -7686,7 +7961,7 @@ var driveSendTextCommand = new Command21("send-text").description("Type literal
     handleDriveError(err);
   }
 });
-var drivePromptCommand = new Command21("prompt").description('Type text into the agent session and press Enter \u2014 convenience for "send a message to the running agent".').argument("<box>", "box ref").argument("<text>", "prompt text to send (literal; no DSL parsing)").option(sessionOption[0], sessionOption[1]).option("--delay <ms>", `milliseconds to wait between text and Enter (default: ${String(PROMPT_ENTER_DELAY_MS)})`).action(async (boxRef, text, opts) => {
+var drivePromptCommand = new Command22("prompt").description('Type text into the agent session and press Enter \u2014 convenience for "send a message to the running agent".').argument("<box>", "box ref").argument("<text>", "prompt text to send (literal; no DSL parsing)").option(sessionOption[0], sessionOption[1]).option("--delay <ms>", `milliseconds to wait between text and Enter (default: ${String(PROMPT_ENTER_DELAY_MS)})`).action(async (boxRef, text, opts) => {
   try {
     const box = await resolveBoxOrExit(boxRef);
     const provider = await providerForBox(box);
@@ -7699,7 +7974,7 @@ var drivePromptCommand = new Command21("prompt").description('Type text into the
     handleDriveError(err);
   }
 });
-var driveWaitCommand = new Command21("wait").description("Block until --text appears in the session's rendered screen, or exit non-zero on timeout.").argument("<box>", "box ref").requiredOption("--text <str>", "substring to wait for").option("--timeout <ms>", "wall-clock cap in milliseconds (default: 5000)").option(sessionOption[0], sessionOption[1]).option("--json", "emit a JSON envelope { matched, elapsedMs, session, screen? }").action(async (boxRef, opts) => {
+var driveWaitCommand = new Command22("wait").description("Block until --text appears in the session's rendered screen, or exit non-zero on timeout.").argument("<box>", "box ref").requiredOption("--text <str>", "substring to wait for").option("--timeout <ms>", "wall-clock cap in milliseconds (default: 5000)").option(sessionOption[0], sessionOption[1]).option("--json", "emit a JSON envelope { matched, elapsedMs, session, screen? }").action(async (boxRef, opts) => {
   try {
     const box = await resolveBoxOrExit(boxRef);
     const provider = await providerForBox(box);
@@ -7732,14 +8007,14 @@ var driveWaitCommand = new Command21("wait").description("Block until --text app
         }) + "\n"
       );
     } else {
-      log26.error(`text not found within ${String(timeoutMs)}ms: ${opts.text}`);
+      log27.error(`text not found within ${String(timeoutMs)}ms: ${opts.text}`);
     }
     process.exit(1);
   } catch (err) {
     handleDriveError(err);
   }
 });
-var driveResizeCommand = new Command21("resize").description("Resize the tmux window to <cols> x <rows>.").argument("<box>", "box ref").argument("<cols>", "columns (positive int)").argument("<rows>", "rows (positive int)").option(sessionOption[0], sessionOption[1]).action(async (boxRef, colsStr, rowsStr, opts) => {
+var driveResizeCommand = new Command22("resize").description("Resize the tmux window to <cols> x <rows>.").argument("<box>", "box ref").argument("<cols>", "columns (positive int)").argument("<rows>", "rows (positive int)").option(sessionOption[0], sessionOption[1]).action(async (boxRef, colsStr, rowsStr, opts) => {
   try {
     const box = await resolveBoxOrExit(boxRef);
     const provider = await providerForBox(box);
@@ -7759,8 +8034,8 @@ driveCommand.addCommand(driveWaitCommand);
 driveCommand.addCommand(driveResizeCommand);
 function handleDriveError(err) {
   if (err instanceof SessionNotFoundError) {
-    log26.error(err.message);
-    log26.info("start an agent first (e.g. `agentbox claude <box>`) or pass --session.");
+    log27.error(err.message);
+    log27.info("start an agent first (e.g. `agentbox claude <box>`) or pass --session.");
     process.exit(2);
   }
   handleLifecycleError(err);
@@ -7784,8 +8059,8 @@ function sleep2(ms) {
 }
 
 // src/commands/fork.ts
-import { log as log27 } from "@clack/prompts";
-import { Command as Command22 } from "commander";
+import { log as log28 } from "@clack/prompts";
+import { Command as Command23 } from "commander";
 import { existsSync as existsSync4, readdirSync, statSync } from "fs";
 import { homedir as homedir8 } from "os";
 import { join as join10 } from "path";
@@ -7837,7 +8112,7 @@ function resolveAttachArgs(attachIn) {
   if (attachIn === "same") return ["--attach-in", "same"];
   return detectHostTerminal() === "unknown" ? ["--no-attach"] : ["--attach-in", attachIn];
 }
-var forkCommand = new Command22("fork").description(
+var forkCommand = new Command23("fork").description(
   "Fork the current host agent session into a new box and resume it there. Opens the box in a new terminal tab under iTerm/tmux; otherwise starts it in the background."
 ).option("-w, --workspace <path>", "host workspace to mount", process.cwd()).option(
   "--agent <name>",
@@ -7853,19 +8128,19 @@ var forkCommand = new Command22("fork").description(
   "auto-approve agentbox.yaml's carry: block (fork skips carry by default \u2014 it does not silently re-copy host files into the new box)"
 ).action(async (opts) => {
   if ((process.env.AGENTBOX_RELAY_URL ?? "").trim().length > 0) {
-    log27.error(
+    log28.error(
       "agentbox fork runs on the host only: it teleports a host agent session into a new box. You appear to be inside a box (AGENTBOX_RELAY_URL is set) \u2014 box\u2192box fork is not supported yet."
     );
     process.exit(2);
   }
   const agent = opts.agent?.trim() || "claude";
   if (!FORK_AGENTS.includes(agent)) {
-    log27.error(`--agent: expected one of ${FORK_AGENTS.join(", ")}, got "${opts.agent ?? ""}"`);
+    log28.error(`--agent: expected one of ${FORK_AGENTS.join(", ")}, got "${opts.agent ?? ""}"`);
     process.exit(2);
   }
   const attachIn = opts.attachIn ?? "tab";
   if (!FORK_ATTACH_VALUES.includes(attachIn)) {
-    log27.error(`--attach-in: expected one of ${FORK_ATTACH_VALUES.join(", ")}, got "${attachIn}"`);
+    log28.error(`--attach-in: expected one of ${FORK_ATTACH_VALUES.join(", ")}, got "${attachIn}"`);
     process.exit(2);
   }
   const provider = opts.provider?.trim();
@@ -7873,7 +8148,7 @@ var forkCommand = new Command22("fork").description(
   try {
     sessionArgs = resolveSessionArgs(agent, opts);
   } catch (err) {
-    log27.error(err instanceof Error ? err.message : String(err));
+    log28.error(err instanceof Error ? err.message : String(err));
     process.exit(2);
   }
   const subArgv = [
@@ -7891,8 +8166,8 @@ var forkCommand = new Command22("fork").description(
 });
 
 // src/commands/install.ts
-import { intro as intro5, log as log28, outro as outro6 } from "@clack/prompts";
-import { Command as Command23 } from "commander";
+import { intro as intro5, log as log29, outro as outro6 } from "@clack/prompts";
+import { Command as Command24 } from "commander";
 import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir9 } from "os";
 import { dirname, join as join11, resolve as resolve2 } from "path";
@@ -7941,7 +8216,7 @@ function writableReason(target, force) {
   }
   return force ? "forced" : "skip";
 }
-var installCommand = new Command23("install").description(
+var installCommand = new Command24("install").description(
   "Install AgentBox's host-side /agentbox fork command into Claude (~/.claude/skills), and \u2014 when detected \u2014 into Codex (~/.codex/prompts) and OpenCode (~/.config/opencode/commands). Idempotent."
 ).option("--force", "overwrite existing files even if not AgentBox-managed").option("--dry-run", "print what would be written without changing anything").action((opts) => {
   intro5("Installing AgentBox host commands...");
@@ -7951,7 +8226,7 @@ var installCommand = new Command23("install").description(
   try {
     srcDir = resolveHostSkillsDir();
   } catch (err) {
-    log28.error(err instanceof Error ? err.message : String(err));
+    log29.error(err instanceof Error ? err.message : String(err));
     process.exit(1);
   }
   const written = [];
@@ -7959,19 +8234,19 @@ var installCommand = new Command23("install").description(
   for (const t of installTargets()) {
     const src = join11(srcDir, t.src);
     if (!existsSync5(src)) {
-      log28.warn(`bundled file missing (skipped): ${src}`);
+      log29.warn(`bundled file missing (skipped): ${src}`);
       skipped++;
       continue;
     }
     if (t.gateDir && !existsSync5(t.gateDir)) continue;
     const reason = writableReason(t.dest, force);
     if (reason === "skip") {
-      log28.warn(`user-modified file at ${t.dest}, skipping; pass --force to overwrite`);
+      log29.warn(`user-modified file at ${t.dest}, skipping; pass --force to overwrite`);
       skipped++;
       continue;
     }
     if (dryRun) {
-      log28.info(`would write ${t.dest} (${reason})`);
+      log29.info(`would write ${t.dest} (${reason})`);
       written.push(t.dest);
       continue;
     }
@@ -7991,7 +8266,7 @@ var installCommand = new Command23("install").description(
 });
 
 // src/commands/git.ts
-import { Command as Command24 } from "commander";
+import { Command as Command25 } from "commander";
 var WORKSPACE = "/workspace";
 var TOKEN_TTL_MS = 12e4;
 async function runInBox(box, argv) {
@@ -8023,7 +8298,7 @@ function buildPredictedGhPrParams(ghArgs) {
 async function exitWith(code) {
   process.exit(code);
 }
-var pushCommand = new Command24("push").description("Push the box's branch via the host relay (host creds, no prompt)").argument("<box>", "box ref: project index, id, id prefix, name, or container").argument("[args...]", "extra flags forwarded to `agentbox-ctl git push` (e.g. --force-with-lease, --tags)").option("--remote <name>", "remote name (default: origin)").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args, opts) => {
+var pushCommand = new Command25("push").description("Push the box's branch via the host relay (host creds, no prompt)").argument("<box>", "box ref: project index, id, id prefix, name, or container").argument("[args...]", "extra flags forwarded to `agentbox-ctl git push` (e.g. --force-with-lease, --tags)").option("--remote <name>", "remote name (default: origin)").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args, opts) => {
   try {
     const box = await resolveBoxOrExit(boxRef);
     const predicted = buildPredictedGitParams(opts.remote, args);
@@ -8036,7 +8311,7 @@ var pushCommand = new Command24("push").description("Push the box's branch via t
     handleLifecycleError(err);
   }
 });
-var fetchCommand = new Command24("fetch").description("Fetch via the host relay (refs land in the shared .git)").argument("<box>", "box ref").argument("[args...]", "extra flags forwarded to `agentbox-ctl git fetch` (e.g. --prune)").option("--remote <name>", "remote name (default: origin)").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args, opts) => {
+var fetchCommand = new Command25("fetch").description("Fetch via the host relay (refs land in the shared .git)").argument("<box>", "box ref").argument("[args...]", "extra flags forwarded to `agentbox-ctl git fetch` (e.g. --prune)").option("--remote <name>", "remote name (default: origin)").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args, opts) => {
   try {
     const box = await resolveBoxOrExit(boxRef);
     const predicted = buildPredictedGitParams(opts.remote, args);
@@ -8049,7 +8324,7 @@ var fetchCommand = new Command24("fetch").description("Fetch via the host relay
     handleLifecycleError(err);
   }
 });
-var pullCommand = new Command24("pull").description(
+var pullCommand = new Command25("pull").description(
   "Fetch via the relay then merge in /workspace. With <branch>: first `git checkout <branch>` so the box switches base branch and pulls latest \u2014 useful for reusing a box on a new task."
 ).argument("<box>", "box ref").argument("[branch]", "optional branch to switch to before pulling (e.g. main)").argument("[args...]", "extra flags forwarded to `agentbox-ctl git pull`").option("--remote <name>", "remote name (default: origin)").option("--ff-only", "pass --ff-only to the in-box merge").allowExcessArguments(true).allowUnknownOption(true).action(
   async (boxRef, branch, args, opts) => {
@@ -8071,7 +8346,7 @@ var pullCommand = new Command24("pull").description(
     }
   }
 );
-var checkoutCommand = new Command24("checkout").description("Change the box's working branch (runs `git checkout <branch>` in /workspace)").argument("<box>", "box ref").argument("<branch>", "branch to check out inside the box").argument("[args...]", "extra flags forwarded to `git checkout`").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, branch, args) => {
+var checkoutCommand = new Command25("checkout").description("Change the box's working branch (runs `git checkout <branch>` in /workspace)").argument("<box>", "box ref").argument("<branch>", "branch to check out inside the box").argument("[args...]", "extra flags forwarded to `git checkout`").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, branch, args) => {
   try {
     const box = await resolveBoxOrExit(boxRef);
     await exitWith(await runAndStream(box, ["git", "checkout", branch, ...args]));
@@ -8079,7 +8354,7 @@ var checkoutCommand = new Command24("checkout").description("Change the box's wo
     handleLifecycleError(err);
   }
 });
-var statusCommand = new Command24("status").description("Run `git status` in the box's /workspace (read-only, no relay)").argument("<box>", "box ref").argument("[args...]", "extra flags forwarded to `git status`").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args) => {
+var statusCommand = new Command25("status").description("Run `git status` in the box's /workspace (read-only, no relay)").argument("<box>", "box ref").argument("[args...]", "extra flags forwarded to `git status`").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args) => {
   try {
     const box = await resolveBoxOrExit(boxRef);
     await exitWith(await runAndStream(box, ["git", "status", ...args]));
@@ -8098,21 +8373,18 @@ var PR_OP_DESCRIPTIONS = {
   close: "Close a PR.",
   reopen: "Reopen a PR."
 };
-function injectPrCreateHead(op, box, args) {
-  if (op !== "create") return args;
-  if (args.some((a) => a === "--head" || a.startsWith("--head="))) return args;
+function injectPrCreateHead2(op, box, args) {
   const rootWt = (box.gitWorktrees ?? []).find((w) => w.kind === "root");
-  if (!rootWt) return args;
-  return ["--head", rootWt.branch, ...args];
+  return injectPrCreateHead(op, rootWt?.branch, args);
 }
 function buildPrSubcommand(op) {
-  return new Command24(op).description(PR_OP_DESCRIPTIONS[op]).argument("<box>", "box ref").argument(
+  return new Command25(op).description(PR_OP_DESCRIPTIONS[op]).argument("<box>", "box ref").argument(
     "[args...]",
     "extra flags forwarded to `gh pr <op>` (e.g. --title, --body, --label, --draft, --json)"
   ).allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args) => {
     try {
       const box = await resolveBoxOrExit(boxRef);
-      const ghArgs = injectPrCreateHead(op, box, args);
+      const ghArgs = injectPrCreateHead2(op, box, args);
       const predicted = buildPredictedGhPrParams(ghArgs);
       const tokenArgs = await hostInitiatedArgs(box.id, `gh.pr.${op}`, predicted);
       const argv = ["agentbox-ctl", "gh", "pr", op, ...tokenArgs, ...ghArgs];
@@ -8122,18 +8394,18 @@ function buildPrSubcommand(op) {
     }
   });
 }
-var prCommand = new Command24("pr").description(
+var prCommand = new Command25("pr").description(
   "PR operations against a box's branch via the host `gh` CLI"
 );
 for (const op of GH_PR_OPS) {
   const sub = buildPrSubcommand(op);
   prCommand.addCommand(sub, op === "create" ? { isDefault: true } : void 0);
 }
-var gitCommand = new Command24("git").description("Run git / gh pr operations against a box from the host").addCommand(pushCommand).addCommand(fetchCommand).addCommand(pullCommand).addCommand(checkoutCommand).addCommand(statusCommand).addCommand(prCommand);
+var gitCommand = new Command25("git").description("Run git / gh pr operations against a box from the host").addCommand(pushCommand).addCommand(fetchCommand).addCommand(pullCommand).addCommand(checkoutCommand).addCommand(statusCommand).addCommand(prCommand);
 
 // src/commands/list.ts
-import { log as log29 } from "@clack/prompts";
-import { Command as Command25 } from "commander";
+import { log as log30 } from "@clack/prompts";
+import { Command as Command26 } from "commander";
 import { pathToFileURL } from "url";
 
 // src/hyperlink.ts
@@ -8303,10 +8575,10 @@ async function buildListText(all) {
 ${table}`;
 }
 var listCommand2 = withWatchOptions(
-  new Command25("list").alias("ls").description("List agent boxes in the current project (-g for all)").option("-j, --json", "machine-readable JSON output").option("-g, --global", "include boxes from all projects")
+  new Command26("list").alias("ls").description("List agent boxes in the current project (-g for all)").option("-j, --json", "machine-readable JSON output").option("-g, --global", "include boxes from all projects")
 ).action(async (opts) => {
   if (opts.json && opts.watch) {
-    log29.error("cannot combine --json with --watch");
+    log30.error("cannot combine --json with --watch");
     process.exit(2);
   }
   const all = opts.global ?? false;
@@ -8323,11 +8595,11 @@ var listCommand2 = withWatchOptions(
 });
 
 // src/commands/logs.ts
-import { log as log30 } from "@clack/prompts";
-import { Command as Command26 } from "commander";
+import { log as log31 } from "@clack/prompts";
+import { Command as Command27 } from "commander";
 import { spawn as spawn3 } from "child_process";
 var DAEMON_LOG_PATH = "/var/log/agentbox/ctl-daemon.log";
-var logsCommand = new Command26("logs").description("Print recent log lines from a box service; -f to stream").argument(
+var logsCommand = new Command27("logs").description("Print recent log lines from a box service; -f to stream").argument(
   "[box]",
   "box ref (optional when cwd has exactly 1 box): project index, id, id prefix, name, or container"
 ).argument("[service]", "service name from agentbox.yaml").option("-n, --tail <n>", "how many recent lines to print first", "200").option("-f, --follow", "keep the connection open and stream new lines").option(
@@ -8345,9 +8617,9 @@ var logsCommand = new Command26("logs").description("Print recent log lines from
       service = boxArg;
     }
     if (!service && !opts.daemon) {
-      log30.error("missing <service> argument");
-      log30.info("usage: agentbox logs [box] <service> [-n N] [-f]");
-      log30.info("       agentbox logs [box] --daemon [-n N] [-f]");
+      log31.error("missing <service> argument");
+      log31.info("usage: agentbox logs [box] <service> [-n N] [-f]");
+      log31.info("       agentbox logs [box] --daemon [-n N] [-f]");
       process.exit(2);
     }
     const box = await resolveBoxOrExit(idOrName);
@@ -8358,7 +8630,7 @@ var logsCommand = new Command26("logs").description("Print recent log lines from
     if (!opts.follow) {
       const proc = await provider.exec(box, args, { user: "vscode" });
       if (proc.exitCode !== 0) {
-        log30.error(
+        log31.error(
           `${opts.daemon ? "daemon log" : "agentbox-ctl logs"} failed: ${proc.stderr || proc.stdout}`
         );
         process.exit(1);
@@ -8392,7 +8664,10 @@ var logsCommand = new Command26("logs").description("Print recent log lines from
     });
     const [argv0, ...rest] = spec.argv;
     if (!argv0) throw new Error("provider.buildAttach returned an empty argv");
-    const child = spawn3(argv0, rest, { stdio: ["ignore", "inherit", "inherit"] });
+    const child = spawn3(argv0, rest, {
+      stdio: ["ignore", "inherit", "inherit"],
+      env: spec.env ? { ...process.env, ...spec.env } : process.env
+    });
     const cleanup = async () => {
       if (spec.cleanup) await spec.cleanup();
     };
@@ -8411,12 +8686,12 @@ var logsCommand = new Command26("logs").description("Print recent log lines from
 });
 
 // src/commands/open.ts
-import { log as log31 } from "@clack/prompts";
+import { log as log32 } from "@clack/prompts";
 import { execa as execa2 } from "execa";
 import { existsSync as existsSync6, mkdirSync as mkdirSync4 } from "fs";
 import { homedir as homedir10 } from "os";
 import { join as join12 } from "path";
-import { Command as Command27 } from "commander";
+import { Command as Command28 } from "commander";
 
 // src/commands/path.ts
 async function runPath(box, opts) {
@@ -8438,7 +8713,7 @@ async function runPath(box, opts) {
 }
 
 // src/commands/open.ts
-var openCommand = new Command27("open").description("Open a box's /workspace in Finder (docker: rsync'd snapshot; cloud: sshfs mount)").argument(
+var openCommand = new Command28("open").description("Open a box's /workspace in Finder (docker: rsync'd snapshot; cloud: sshfs mount)").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).option("--no-refresh", "skip the rsync; open whatever's already on disk (docker only)").option(
@@ -8517,10 +8792,10 @@ async function runCloudOpen(box, provider, opts) {
   if (!existsSync6(mountRoot)) {
     mkdirSync4(mountRoot, { recursive: true, mode: 493 });
   } else if (await isMounted(mountRoot)) {
-    log31.info(`re-mounting (stale mount detected at ${mountRoot})`);
+    log32.info(`re-mounting (stale mount detected at ${mountRoot})`);
     await tryUnmount(mountRoot);
   }
-  log31.info(`mounting ${alias}:/workspace at ${mountRoot}`);
+  log32.info(`mounting ${alias}:/workspace at ${mountRoot}`);
   const mount = await execa2(
     sshfsBin,
     [
@@ -8567,8 +8842,8 @@ async function tryUnmount(path) {
 }
 
 // src/commands/pause.ts
-import { Command as Command28 } from "commander";
-var pauseCommand = new Command28("pause").description(
+import { Command as Command29 } from "commander";
+var pauseCommand = new Command29("pause").description(
   "Pause a box. Docker: `docker pause` (cgroup freeze \u2014 sub-second resume). Cloud: backend.pause (Daytona archive \u2014 cold storage; resume is slower but uses no quota while archived)."
 ).argument(
   "[box]",
@@ -8591,8 +8866,8 @@ var pauseCommand = new Command28("pause").description(
 });
 
 // src/commands/prepare.ts
-import { intro as intro6, log as log32, spinner as spinner7 } from "@clack/prompts";
-import { Command as Command29 } from "commander";
+import { intro as intro6, log as log33, spinner as spinner7 } from "@clack/prompts";
+import { Command as Command30 } from "commander";
 async function dockerStatus() {
   let img;
   try {
@@ -8650,7 +8925,7 @@ async function renderDocker(status) {
 }
 async function daytonaStatus() {
   try {
-    const mod = await import("./dist-L4LCG5SJ.js");
+    const mod = await import("./dist-CX5CGVEB.js");
     return await mod.getDaytonaStatus();
   } catch (err) {
     return { configured: false, reason: err instanceof Error ? err.message.split("\n")[0] : String(err) };
@@ -8709,11 +8984,11 @@ async function showStatus(opts) {
   }
   process.stdout.write(lines.join("\n") + "\n");
 }
-var prepareCommand = new Command29("prepare").description(
+var prepareCommand = new Command30("prepare").description(
   "Build base sandbox images / snapshots, or show what is already prepared across providers."
 ).option(
   "-p, --provider <name>",
-  "provider to prepare (docker | daytona | hetzner). Omit for status-only."
+  "provider to prepare (docker | daytona | hetzner | vercel). Omit for status-only."
 ).option(
   "-n, --name <name>",
   "snapshot name (Daytona only; default: agentbox-base-<timestamp>)"
@@ -8738,7 +9013,7 @@ var prepareCommand = new Command29("prepare").description(
   }
   const provider = await getProvider(providerName);
   if (typeof provider.prepare !== "function") {
-    log32.error(`provider '${providerName}' does not implement prepare`);
+    log33.error(`provider '${providerName}' does not implement prepare`);
     process.exit(1);
   }
   const sp = spinner7();
@@ -8759,10 +9034,10 @@ var prepareCommand = new Command29("prepare").description(
           result.snapshotName,
           process.cwd()
         );
-        log32.success(`box.image = ${result.snapshotName} (written to ${written.path})`);
+        log33.success(`box.image = ${result.snapshotName} (written to ${written.path})`);
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
-        log32.warn(
+        log33.warn(
           `prepared snapshot '${result.snapshotName}', but failed to pin it into the project config: ${msg}
 Run \`agentbox config set --project box.image ${result.snapshotName}\` manually.`
         );
@@ -8772,7 +9047,7 @@ Run \`agentbox config set --project box.image ${result.snapshotName}\` manually.
     }
     process.stdout.write("\n");
     await showStatus({ onlyProvider: providerName });
-    log32.info(
+    log33.info(
       "tip: install the agentbox host skill so Claude Code on this machine can drive AgentBox for you:\n  npx skills add https://github.com/madarco/agentbox --skill agentbox"
     );
   } catch (err) {
@@ -8802,8 +9077,8 @@ function describeError(err) {
 }
 
 // src/commands/prune.ts
-import { confirm as confirm14, isCancel as isCancel15, log as log33 } from "@clack/prompts";
-import { Command as Command30 } from "commander";
+import { confirm as confirm14, isCancel as isCancel15, log as log34 } from "@clack/prompts";
+import { Command as Command31 } from "commander";
 function totalRemovals(r, projectConfigs) {
   return r.removedRecords.length + r.removedContainers.length + r.removedVolumes.length + r.removedSnapshotDirs.length + r.removedBoxDirs.length + projectConfigs.length;
 }
@@ -8849,20 +9124,20 @@ async function liveProjectRoots() {
     return [];
   }
 }
-var pruneCommand = new Command30("prune").description("Clean up orphan state.json records (and with --all, orphan docker resources)").option("--dry-run", "show what would be removed, don't change anything").option(
+var pruneCommand = new Command31("prune").description("Clean up orphan state.json records (and with --all, orphan docker resources)").option("--dry-run", "show what would be removed, don't change anything").option(
   "--all",
   "also remove orphan agentbox-* containers, volumes, snapshot dirs, and orphan per-project config dirs"
 ).option("-y, --yes", "skip the confirmation prompt").option(
   "--provider <name>",
-  "restrict prune to a specific provider (docker | daytona). For daytona, lists cloud sandboxes that are not in this CLI's state.json and offers to delete them."
+  "restrict prune to a specific provider (docker | daytona | hetzner | vercel). For cloud providers, lists sandboxes that are not in this CLI's state.json and offers to delete them."
 ).action(async (opts) => {
   try {
-    if (opts.provider === "daytona") {
-      await pruneDaytona(opts);
+    if (opts.provider !== void 0 && isCloudPruneProvider(opts.provider)) {
+      await pruneCloud(opts.provider, opts);
       return;
     }
     if (opts.provider !== void 0 && opts.provider !== "docker") {
-      log33.error(`unknown provider '${opts.provider}'; expected docker or daytona`);
+      log34.error(`unknown provider '${opts.provider}'; expected docker, daytona, hetzner, or vercel`);
       process.exit(2);
     }
     const dryRun = opts.dryRun ?? false;
@@ -8875,13 +9150,13 @@ var pruneCommand = new Command30("prune").description("Clean up orphan state.jso
       process.stdout.write("nothing to prune\n");
       return;
     }
-    log33.info(`would remove:
+    log34.info(`would remove:
 ${summary(preview, previewProjects)}`);
     if (dryRun) return;
     if (!opts.yes) {
       const ok = await confirm14({ message: "Proceed with prune?", initialValue: true });
       if (isCancel15(ok) || !ok) {
-        log33.info("cancelled");
+        log34.info("cancelled");
         return;
       }
     }
@@ -8894,17 +9169,31 @@ ${summary(result, removedProjects)}
     handleLifecycleError(err);
   }
 });
-async function pruneDaytona(opts) {
+var CLOUD_PRUNE_PROVIDERS = ["daytona", "hetzner", "vercel"];
+function isCloudPruneProvider(name) {
+  return CLOUD_PRUNE_PROVIDERS.includes(name);
+}
+async function cloudBackendFor(provider) {
+  switch (provider) {
+    case "daytona":
+      return (await import("./dist-CX5CGVEB.js")).daytonaBackend;
+    case "hetzner":
+      return (await import("./dist-GDHP34ZK.js")).hetznerBackend;
+    case "vercel":
+      return (await import("./dist-XML54CNB.js")).vercelBackend;
+  }
+}
+async function pruneCloud(provider, opts) {
   const dryRun = opts.dryRun ?? false;
-  const { daytonaBackend: daytonaBackend2 } = await import("./dist-L4LCG5SJ.js");
-  if (!daytonaBackend2.list) {
-    log33.error("daytona backend doesn't expose `list()`; cannot enumerate sandboxes for prune");
+  const backend = await cloudBackendFor(provider);
+  if (!backend.list) {
+    log34.error(`${provider} backend doesn't expose \`list()\`; cannot enumerate sandboxes for prune`);
     process.exit(2);
   }
-  const [remote, state] = await Promise.all([daytonaBackend2.list(), readState()]);
+  const [remote, state] = await Promise.all([backend.list(), readState()]);
   const knownIds = /* @__PURE__ */ new Set();
   for (const b of state.boxes) {
-    if ((b.provider ?? "docker") === "daytona" && b.cloud?.sandboxId) {
+    if ((b.provider ?? "docker") === provider && b.cloud?.sandboxId) {
       knownIds.add(b.cloud.sandboxId);
     }
   }
@@ -8914,10 +9203,11 @@ async function pruneDaytona(opts) {
     return friendly.length > 0;
   });
   if (orphans.length === 0) {
-    process.stdout.write("no daytona orphans found\n");
+    process.stdout.write(`no ${provider} orphans found
+`);
     return;
   }
-  log33.info(`found ${String(orphans.length)} daytona sandbox(es) not in this CLI's state:`);
+  log34.info(`found ${String(orphans.length)} ${provider} sandbox(es) not in this CLI's state:`);
   for (const sb of orphans) {
     const parts = [sb.sandboxId];
     if (sb.name) parts.push(sb.name);
@@ -8933,7 +9223,7 @@ async function pruneDaytona(opts) {
       initialValue: false
     });
     if (isCancel15(ok) || !ok) {
-      log33.info("cancelled");
+      log34.info("cancelled");
       return;
     }
   }
@@ -8941,34 +9231,34 @@ async function pruneDaytona(opts) {
   let failed = 0;
   for (const sb of orphans) {
     try {
-      await daytonaBackend2.destroy({ sandboxId: sb.sandboxId });
+      await backend.destroy({ sandboxId: sb.sandboxId });
       deleted++;
     } catch (err) {
       failed++;
-      log33.warn(
+      log34.warn(
         `delete ${sb.sandboxId} failed: ${err instanceof Error ? err.message : String(err)}`
       );
     }
   }
   process.stdout.write(
-    `daytona prune: deleted ${String(deleted)}, failed ${String(failed)}
+    `${provider} prune: deleted ${String(deleted)}, failed ${String(failed)}
 `
   );
 }
 
 // src/commands/queue.ts
 import { readFile as readFile4, stat as stat5 } from "fs/promises";
-import { intro as intro7, log as log34, outro as outro7 } from "@clack/prompts";
-import { Command as Command31 } from "commander";
+import { intro as intro7, log as log35, outro as outro7 } from "@clack/prompts";
+import { Command as Command32 } from "commander";
 var TERMINAL_STATUSES = /* @__PURE__ */ new Set(["done", "failed", "cancelled"]);
-var queueCommand = new Command31("queue").description("Inspect and manage background `agentbox claude|codex|opencode -i` jobs");
-var queueListCommand = new Command31("list").description("List queued, running, and (with --all) terminal background jobs").option("--all", "include done/failed/cancelled jobs (default: hide terminal)").action(async (opts) => {
+var queueCommand = new Command32("queue").description("Inspect and manage background `agentbox claude|codex|opencode -i` jobs");
+var queueListCommand = new Command32("list").description("List queued, running, and (with --all) terminal background jobs").option("--all", "include done/failed/cancelled jobs (default: hide terminal)").action(async (opts) => {
   const jobs = await loadQueue();
   const cfg = await loadQueueConfig();
   const visible = opts.all === true ? jobs : jobs.filter((j) => !TERMINAL_STATUSES.has(j.status));
   if (visible.length === 0) {
-    log34.info(opts.all ? "no queued jobs." : "no active queued jobs (--all to see terminal).");
-    log34.info(`queue.maxConcurrent = ${String(cfg.maxConcurrent)} (queue.enabled=${String(cfg.enabled)})`);
+    log35.info(opts.all ? "no queued jobs." : "no active queued jobs (--all to see terminal).");
+    log35.info(`queue.maxConcurrent = ${String(cfg.maxConcurrent)} (queue.enabled=${String(cfg.enabled)})`);
     return;
   }
   const rows = visible.map((j) => ({
@@ -8993,12 +9283,12 @@ var queueListCommand = new Command31("list").description("List queued, running,
       headers.map((h, i) => pad3(String(r[h]), widths[i])).join("  ") + "\n"
     );
   }
-  log34.info(`queue.maxConcurrent = ${String(cfg.maxConcurrent)} (queue.enabled=${String(cfg.enabled)})`);
+  log35.info(`queue.maxConcurrent = ${String(cfg.maxConcurrent)} (queue.enabled=${String(cfg.enabled)})`);
 });
-var queueShowCommand = new Command31("show").description("Dump a job manifest and tail its log").argument("<id>", "queue job id (from `agentbox queue list`)").option("--tail <n>", "lines of log to print (default: 50)", "50").action(async (id, opts) => {
+var queueShowCommand = new Command32("show").description("Dump a job manifest and tail its log").argument("<id>", "queue job id (from `agentbox queue list`)").option("--tail <n>", "lines of log to print (default: 50)", "50").action(async (id, opts) => {
   const job = await readJob(id);
   if (!job) {
-    log34.error(`no job with id ${id}`);
+    log35.error(`no job with id ${id}`);
     process.exit(1);
   }
   process.stdout.write(JSON.stringify(job, null, 2) + "\n");
@@ -9014,18 +9304,18 @@ var queueShowCommand = new Command31("show").description("Dump a job manifest an
     process.stdout.write(slice.join("\n"));
     if (!slice.join("\n").endsWith("\n")) process.stdout.write("\n");
   } catch {
-    log34.info(`(no log at ${job.logPath} yet)`);
+    log35.info(`(no log at ${job.logPath} yet)`);
   }
 });
-var queueCancelCommand = new Command31("cancel").description("Cancel a queued job; running jobs are NOT killed \u2014 use `agentbox destroy` instead").argument("<id>", "queue job id (from `agentbox queue list`)").action(async (id) => {
+var queueCancelCommand = new Command32("cancel").description("Cancel a queued job; running jobs are NOT killed \u2014 use `agentbox destroy` instead").argument("<id>", "queue job id (from `agentbox queue list`)").action(async (id) => {
   intro7(`Cancelling queue job ${id}...`);
   const job = await readJob(id);
   if (!job) {
-    log34.error(`no job with id ${id}`);
+    log35.error(`no job with id ${id}`);
     process.exit(1);
   }
   if (job.status !== "queued") {
-    log34.error(
+    log35.error(
       `job ${id} is ${job.status}; cancel only flips 'queued' \u2192 'cancelled'.` + (job.status === "running" ? ` Use 'agentbox destroy ${job.boxName || id}' to stop the box.` : "")
     );
     process.exit(1);
@@ -9039,13 +9329,13 @@ var queueCancelCommand = new Command31("cancel").description("Cancel a queued jo
   await writeJob(cancelled);
   outro7(`job ${id} cancelled`);
 });
-var queueClearCommand = new Command31("clear").description("Sweep terminal-state manifests from ~/.agentbox/queue/").option("--done", "remove done jobs").option("--failed", "remove failed jobs").option("--cancelled", "remove cancelled jobs").option("--all", "remove every terminal-state job (done + failed + cancelled)").action(async (opts) => {
+var queueClearCommand = new Command32("clear").description("Sweep terminal-state manifests from ~/.agentbox/queue/").option("--done", "remove done jobs").option("--failed", "remove failed jobs").option("--cancelled", "remove cancelled jobs").option("--all", "remove every terminal-state job (done + failed + cancelled)").action(async (opts) => {
   const targets = /* @__PURE__ */ new Set();
   if (opts.all === true || opts.done === true) targets.add("done");
   if (opts.all === true || opts.failed === true) targets.add("failed");
   if (opts.all === true || opts.cancelled === true) targets.add("cancelled");
   if (targets.size === 0) {
-    log34.error("pick at least one of: --done, --failed, --cancelled, --all");
+    log35.error("pick at least one of: --done, --failed, --cancelled, --all");
     process.exit(2);
   }
   const jobs = await loadQueue();
@@ -9055,7 +9345,7 @@ var queueClearCommand = new Command31("clear").description("Sweep terminal-state
     await deleteJob(j.id);
     removed += 1;
   }
-  log34.success(`removed ${String(removed)} manifest${removed === 1 ? "" : "s"}`);
+  log35.success(`removed ${String(removed)} manifest${removed === 1 ? "" : "s"}`);
 });
 var QUEUE_WAIT_EVENTS = [
   "new-box",
@@ -9068,11 +9358,11 @@ var QUEUE_WAIT_EVENTS = [
 var ACTIVE_JOB_STATUSES = /* @__PURE__ */ new Set(["queued", "running"]);
 var DEFAULT_QUEUE_WAIT_TIMEOUT_MS = 10 * 60 * 1e3;
 var QUEUE_POLL_INTERVAL_MS = 500;
-var queueWaitForCommand = new Command31("wait-for").description(
+var queueWaitForCommand = new Command32("wait-for").description(
   `Block until a queue / box event fires. <event> one of: ${QUEUE_WAIT_EVENTS.join(" | ")}.`
 ).argument("<event>", `target event: ${QUEUE_WAIT_EVENTS.join(" | ")}`).option("--box <ref>", "box ref (required for box-paused / box-running / box-stopped)").option("--job <id>", "queue job id (required for job-done)").option("--timeout <ms>", `wall-clock cap (default: ${String(DEFAULT_QUEUE_WAIT_TIMEOUT_MS)})`).option("--json", "emit a JSON envelope { matched, elapsedMs, ... }").action(async (eventRaw, opts) => {
   if (!QUEUE_WAIT_EVENTS.includes(eventRaw)) {
-    log34.error(`unknown event '${eventRaw}' (one of: ${QUEUE_WAIT_EVENTS.join(", ")})`);
+    log35.error(`unknown event '${eventRaw}' (one of: ${QUEUE_WAIT_EVENTS.join(", ")})`);
     process.exit(2);
   }
   const event = eventRaw;
@@ -9092,11 +9382,11 @@ var queueWaitForCommand = new Command31("wait-for").description(
       if (opts.json === true) {
         process.stdout.write(JSON.stringify({ matched: false, event, elapsedMs }) + "\n");
       } else {
-        log34.error(`'${event}' did not occur within ${String(timeoutMs)}ms`);
+        log35.error(`'${event}' did not occur within ${String(timeoutMs)}ms`);
       }
       process.exit(1);
     }
-    log34.error(err instanceof Error ? err.message : String(err));
+    log35.error(err instanceof Error ? err.message : String(err));
     process.exit(1);
   }
 });
@@ -9193,8 +9483,8 @@ function truncate(s, max) {
 }
 
 // src/commands/relay.ts
-import { log as log35, spinner as spinner8 } from "@clack/prompts";
-import { Command as Command32 } from "commander";
+import { log as log36, spinner as spinner8 } from "@clack/prompts";
+import { Command as Command33 } from "commander";
 async function rehydrateFromState() {
   const state = await readState();
   await rehydrateRelayRegistry(
@@ -9234,7 +9524,7 @@ function renderStatus(s) {
   }
   return ["relay: not running", `  log:    ${s.logFile}`].join("\n");
 }
-var statusSub = new Command32("status").description("Show whether the host relay is running, with pid / port / box count").option("--json", "emit RelayStatus as JSON").action(async (opts) => {
+var statusSub = new Command33("status").description("Show whether the host relay is running, with pid / port / box count").option("--json", "emit RelayStatus as JSON").action(async (opts) => {
   try {
     const s = await getRelayStatus();
     if (opts.json) {
@@ -9246,7 +9536,7 @@ var statusSub = new Command32("status").description("Show whether the host relay
     handleLifecycleError(err);
   }
 });
-var stopSub = new Command32("stop").description("Stop the host relay process (idempotent)").action(async () => {
+var stopSub = new Command33("stop").description("Stop the host relay process (idempotent)").action(async () => {
   try {
     const s = spinner8();
     s.start("stopping relay");
@@ -9258,7 +9548,7 @@ var stopSub = new Command32("stop").description("Stop the host relay process (id
     handleLifecycleError(err);
   }
 });
-var startSub = new Command32("start").description("Start the host relay if not already running (idempotent)").action(async () => {
+var startSub = new Command33("start").description("Start the host relay if not already running (idempotent)").action(async () => {
   try {
     const s = spinner8();
     s.start("starting relay");
@@ -9269,7 +9559,7 @@ var startSub = new Command32("start").description("Start the host relay if not a
     handleLifecycleError(err);
   }
 });
-var restartSub = new Command32("restart").description("Stop then start the host relay").action(async () => {
+var restartSub = new Command33("restart").description("Stop then start the host relay").action(async () => {
   try {
     const s = spinner8();
     s.start("stopping relay");
@@ -9285,29 +9575,31 @@ var restartSub = new Command32("restart").description("Stop then start the host
       s2.stop(`relay running on ${ep.hostUrl}`);
     } catch (err) {
       s2.stop("relay start failed");
-      log35.warn(err instanceof Error ? err.message : String(err));
+      log36.warn(err instanceof Error ? err.message : String(err));
       throw err;
     }
   } catch (err) {
     handleLifecycleError(err);
   }
 });
-var relayCommand = new Command32("relay").description("Manage the host relay process (status / stop / start / restart)").addCommand(statusSub, { isDefault: true }).addCommand(stopSub).addCommand(startSub).addCommand(restartSub);
+var relayCommand = new Command33("relay").description("Manage the host relay process (status / stop / start / restart)").addCommand(statusSub, { isDefault: true }).addCommand(stopSub).addCommand(startSub).addCommand(restartSub);
 
 // src/commands/_run-queued-job.ts
-import { Command as Command33 } from "commander";
-var runQueuedJobCommand = new Command33("_run-queued-job").description("internal: run a queued background agent job (do not invoke directly)").argument("<id>", "queue job id (from ~/.agentbox/queue/<id>.json)").action(async (id) => {
-  const log44 = openCommandLog(`queue-${id}`);
-  log44.write(`worker pid=${String(process.pid)} starting for job ${id}`);
+import { Command as Command34 } from "commander";
+var runQueuedJobCommand = new Command34("_run-queued-job").description("internal: run a queued background agent job (do not invoke directly)").argument("<id>", "queue job id (from ~/.agentbox/queue/<id>.json)").action(async (id) => {
+  const log45 = openCommandLog(`queue-${id}`);
+  log45.write(`worker pid=${String(process.pid)} starting for job ${id}`);
   let job = null;
   try {
     job = await readJob(id);
     if (!job) {
-      log44.write(`FATAL: no manifest at id=${id}`);
-      log44.close();
+      log45.write(`FATAL: no manifest at id=${id}`);
+      log45.close();
       process.exit(64);
     }
-    await runDockerJob(job, log44);
+    await runDockerJob(job, log45, (boxId) => {
+      if (job) job = { ...job, boxId };
+    });
     const done = {
       ...job,
       status: "done",
@@ -9315,12 +9607,12 @@ var runQueuedJobCommand = new Command33("_run-queued-job").description("internal
       exitCode: 0
     };
     await writeJob(done);
-    log44.write(`done`);
-    log44.close();
+    log45.write(`done`);
+    log45.close();
     process.exit(0);
   } catch (err) {
     const msg = err instanceof Error ? err.stack ?? err.message : String(err);
-    log44.write(`FAIL: ${msg}`);
+    log45.write(`FAIL: ${msg}`);
     if (job) {
       try {
         const failed = {
@@ -9334,11 +9626,11 @@ var runQueuedJobCommand = new Command33("_run-queued-job").description("internal
       } catch {
       }
     }
-    log44.close();
+    log45.close();
     process.exit(1);
   }
 });
-async function runDockerJob(job, log44) {
+async function runDockerJob(job, log45, onBoxCreated) {
   const opts = job.createOpts;
   const cfg = await loadEffectiveConfig(opts.workspace, {
     cliOverrides: buildOverridesFromJob(job)
@@ -9353,7 +9645,7 @@ async function runDockerJob(job, log44) {
   const useSnapshot = opts.hostSnapshot === false ? false : opts.hostSnapshot === true ? true : cfg.effective.box.hostSnapshot ?? false;
   const resolved = job.agent === "claude-code" ? await resolveClaudeAuth(process.env) : null;
   const withPlaywright = cfg.effective.box.withPlaywright || cfg.effective.browser.default !== "agent-browser";
-  log44.write(`creating box for agent=${job.agent}`);
+  log45.write(`creating box for agent=${job.agent}`);
   const result = await createBox({
     workspacePath: opts.workspace,
     name: opts.name && opts.name.length > 0 ? opts.name : void 0,
@@ -9375,17 +9667,19 @@ async function runDockerJob(job, log44) {
     portlessStateDir: cfg.effective.portless.stateDir || void 0,
     limits: resolveLimits(cfg.effective.box, opts),
     projectRoot,
-    onLog: (line) => log44.write(line)
+    onLog: (line) => log45.write(line)
   });
-  log44.write(`box created: ${result.record.container}`);
+  log45.write(`box created: ${result.record.container}`);
+  onBoxCreated(result.record.id);
+  await writeJob({ ...job, boxId: result.record.id });
   const promptedArgs = buildPromptArgs(job.agent, job.prompt, job.agentArgs);
   if (job.agent === "claude-code") {
-    log44.write(`checking plugin native deps`);
+    log45.write(`checking plugin native deps`);
     await rebuildPluginNativeDeps(result.record.container, {
       volume: result.record.claudeConfigVolume ?? SHARED_CLAUDE_VOLUME,
-      onProgress: (line) => log44.write(line)
+      onProgress: (line) => log45.write(line)
     });
-    log44.write(`starting claude session`);
+    log45.write(`starting claude session`);
     await startClaudeSession({
       container: result.record.container,
       claudeArgs: promptedArgs,
@@ -9393,22 +9687,22 @@ async function runDockerJob(job, log44) {
       boxName: result.record.name
     });
   } else if (job.agent === "codex") {
-    log44.write(`checking codex`);
+    log45.write(`checking codex`);
     await ensureCodexInstalled(result.record.container, {
-      onProgress: (line) => log44.write(line)
+      onProgress: (line) => log45.write(line)
     });
-    log44.write(`starting codex session`);
+    log45.write(`starting codex session`);
     await startCodexSession({
       container: result.record.container,
       codexArgs: promptedArgs,
       sessionName: cfg.effective.codex.sessionName
     });
   } else if (job.agent === "opencode") {
-    log44.write(`checking opencode`);
+    log45.write(`checking opencode`);
     await ensureOpencodeInstalled(result.record.container, {
-      onProgress: (line) => log44.write(line)
+      onProgress: (line) => log45.write(line)
     });
-    log44.write(`starting opencode session`);
+    log45.write(`starting opencode session`);
     await startOpencodeSession({
       container: result.record.container,
       opencodeArgs: promptedArgs,
@@ -9440,8 +9734,8 @@ function buildOverridesFromJob(job) {
 
 // src/commands/screen.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { log as log36 } from "@clack/prompts";
-import { Command as Command34 } from "commander";
+import { log as log37 } from "@clack/prompts";
+import { Command as Command35 } from "commander";
 var SIGNED_URL_TTL_MIN = 1;
 var SIGNED_URL_TTL_MAX = 86400;
 function parseTtlOrExit(raw) {
@@ -9454,7 +9748,7 @@ function parseTtlOrExit(raw) {
   }
   return n;
 }
-var screenCommand = new Command34("screen").description("Open a box's VNC (noVNC) viewer in the browser (auto-unpause/start)").argument(
+var screenCommand = new Command35("screen").description("Open a box's VNC (noVNC) viewer in the browser (auto-unpause/start)").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).option("--print", "print the URL to stdout instead of launching the browser").option("--loopback", "docker only: use the 127.0.0.1 URL instead of the OrbStack .orb.local URL").option(
@@ -9471,10 +9765,10 @@ var screenCommand = new Command34("screen").description("Open a box's VNC (noVNC
     if (provider === "docker") {
       const insp = await inspectBox(box.id);
       if (insp.state === "paused") {
-        log36.info("box is paused; unpausing");
+        log37.info("box is paused; unpausing");
         await unpauseBox(box.id);
       } else if (insp.state === "stopped") {
-        log36.info("box is stopped; starting");
+        log37.info("box is stopped; starting");
         await startBox(box.id);
       } else if (insp.state === "missing") {
         throw new Error(`box ${box.name} has no container; was it destroyed?`);
@@ -9484,13 +9778,13 @@ var screenCommand = new Command34("screen").description("Open a box's VNC (noVNC
       const inBoxUrl = exposePort !== void 0 ? box.portlessUrl ?? `http://localhost:${String(exposePort)}` : "about:blank";
       const br = await ensureBoxBrowser(box.container, void 0, inBoxUrl);
       if (br.up && !br.alreadyRunning) {
-        log36.info(
+        log37.info(
           exposePort !== void 0 ? `opened ${inBoxUrl} in the in-box browser (visible in the VNC view)` : "started in-box browser"
         );
       } else if (br.alreadyRunning) {
-        log36.info("in-box browser already running; left it untouched");
+        log37.info("in-box browser already running; left it untouched");
       } else {
-        log36.warn(`could not start in-box browser: ${br.reason ?? "unknown"}`);
+        log37.warn(`could not start in-box browser: ${br.reason ?? "unknown"}`);
       }
       const engine = await detectEngine();
       const urls = buildVncUrls(box, engine);
@@ -9511,10 +9805,10 @@ var screenCommand = new Command34("screen").description("Open a box's VNC (noVNC
       const p = await providerForBox(box);
       const state = await p.probeState(box);
       if (state === "paused") {
-        log36.info("box is paused; resuming");
+        log37.info("box is paused; resuming");
         await p.resume(box);
       } else if (state === "stopped") {
-        log36.info("box is stopped; starting");
+        log37.info("box is stopped; starting");
         await p.start(box);
       } else if (state === "missing") {
         throw new Error(`cloud sandbox for ${box.name} is missing; was it deleted?`);
@@ -9540,18 +9834,18 @@ var screenCommand = new Command34("screen").description("Open a box's VNC (noVNC
 
 // src/commands/shell.ts
 import { spawnSync as spawnSync4 } from "child_process";
-import { log as log38 } from "@clack/prompts";
-import { Command as Command35 } from "commander";
+import { log as log39 } from "@clack/prompts";
+import { Command as Command36 } from "commander";
 
 // src/commands/_provider-guard.ts
-import { log as log37 } from "@clack/prompts";
+import { log as log38 } from "@clack/prompts";
 function requireDockerProvider(box, commandName) {
   const provider = box.provider ?? "docker";
   if (provider === "docker") return;
-  log37.error(
+  log38.error(
     `\`agentbox ${commandName}\` doesn't yet support cloud boxes (this box's provider is '${provider}').`
   );
-  log37.info(
+  log38.info(
     "Cloud-provider routing for this command is on the Phase 3 backlog. For now: use `agentbox url` for web access, `agentbox-ctl git push` from inside the sandbox via SSH/web terminal, or fall back to the cloud provider's own console."
   );
   process.exit(2);
@@ -9591,10 +9885,10 @@ function fmtAgo2(iso) {
 async function ensureBoxRunning(box) {
   const insp = await inspectBox(box.id);
   if (insp.state === "paused") {
-    log38.info("box is paused; unpausing");
+    log39.info("box is paused; unpausing");
     await unpauseBox(box.id);
   } else if (insp.state === "stopped") {
-    log38.info("box is stopped; starting");
+    log39.info("box is stopped; starting");
     await startBox(box.id);
   } else if (insp.state === "missing") {
     throw new Error(`box ${box.name} has no container; was it destroyed?`);
@@ -9633,7 +9927,7 @@ async function startOrAttachShell(box, cfg) {
   const label = shellLabel(cfg.sessionName);
   const info = await shellSessionInfo(box.container, cfg.sessionName, cfg.user);
   if (info.running) {
-    log38.info(`reattaching to shell "${label}" \u2014 Control+a d to detach`);
+    log39.info(`reattaching to shell "${label}" \u2014 Control+a d to detach`);
   } else {
     await startShellSession({
       container: box.container,
@@ -9641,7 +9935,7 @@ async function startOrAttachShell(box, cfg) {
       user: cfg.user,
       login: cfg.login
     });
-    log38.info(`shell "${label}" \u2014 Control+a d to detach, leaves it running`);
+    log39.info(`shell "${label}" \u2014 Control+a d to detach, leaves it running`);
   }
   const code = await runWrappedAttach({
     container: box.container,
@@ -9656,7 +9950,7 @@ async function startOrAttachShell(box, cfg) {
   });
   process.exit(code);
 }
-var shellCommand = new Command35("shell").description(
+var shellCommand = new Command36("shell").description(
   "Open an interactive shell in a box, in a detachable tmux session (auto-unpause/start)"
 ).argument(
   "[box]",
@@ -9694,6 +9988,7 @@ var shellCommand = new Command35("shell").description(
           container: box.name,
           command: spec.argv[0],
           dockerArgv: spec.argv.slice(1),
+          env: spec.env,
           relayBaseUrl: RELAY_HOST_URL5,
           boxId: box.id,
           boxName: box.name,
@@ -9746,7 +10041,7 @@ var shellCommand = new Command35("shell").description(
     handleLifecycleError(err);
   }
 });
-var shellAttachCommand = new Command35("attach").description(
+var shellAttachCommand = new Command36("attach").description(
   "Attach to a shell tmux session in a box, starting one if none is running (auto-unpause/start)"
 ).argument(
   "[box]",
@@ -9784,7 +10079,7 @@ function renderShellTable(sessions) {
   for (const r of rows) process.stdout.write(`${fmt(r)}
 `);
 }
-var shellLsCommand = new Command35("ls").description("List the shell tmux sessions running in a box").argument(
+var shellLsCommand = new Command36("ls").description("List the shell tmux sessions running in a box").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).action(async (idOrName) => {
@@ -9793,11 +10088,11 @@ var shellLsCommand = new Command35("ls").description("List the shell tmux sessio
     requireDockerProvider(box, "shell");
     const insp = await inspectBox(box.id);
     if (insp.state !== "running") {
-      log38.info(`box ${box.name} is ${insp.state} \u2014 no live shell sessions`);
+      log39.info(`box ${box.name} is ${insp.state} \u2014 no live shell sessions`);
       return;
     }
     if (insp.shellSessions.length === 0) {
-      log38.info(
+      log39.info(
         `no shell sessions in ${box.name} \u2014 start one with: agentbox shell ${reattachRef4(box)}`
       );
       return;
@@ -9807,7 +10102,7 @@ var shellLsCommand = new Command35("ls").description("List the shell tmux sessio
     handleLifecycleError(err);
   }
 });
-var shellKillCommand = new Command35("kill").description("Kill a shell tmux session in a box (the shell and anything running in it)").argument(
+var shellKillCommand = new Command36("kill").description("Kill a shell tmux session in a box (the shell and anything running in it)").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).option("-n, --name <label>", "shell label to kill (default: the box default shell)").option("--all", "kill every shell session in the box").action(async function(idOrName) {
@@ -9817,25 +10112,25 @@ var shellKillCommand = new Command35("kill").description("Kill a shell tmux sess
     requireDockerProvider(box, "shell");
     const insp = await inspectBox(box.id);
     if (insp.state !== "running") {
-      log38.info(`box ${box.name} is ${insp.state} \u2014 no shell sessions to kill`);
+      log39.info(`box ${box.name} is ${insp.state} \u2014 no shell sessions to kill`);
       return;
     }
     if (opts.all) {
       if (insp.shellSessions.length === 0) {
-        log38.info(`no shell sessions in ${box.name}`);
+        log39.info(`no shell sessions in ${box.name}`);
         return;
       }
       let killed = 0;
       for (const s of insp.shellSessions) {
         if (await killShellSession(box.container, s.sessionName)) killed++;
       }
-      log38.success(`killed ${String(killed)} shell session${killed === 1 ? "" : "s"} in ${box.name}`);
+      log39.success(`killed ${String(killed)} shell session${killed === 1 ? "" : "s"} in ${box.name}`);
       return;
     }
     const target = shellSessionName(opts.name);
     const ok = await killShellSession(box.container, target);
-    if (ok) log38.success(`killed shell "${shellLabel(target)}" in ${box.name}`);
-    else log38.warn(`no shell "${shellLabel(target)}" in ${box.name} (already gone?)`);
+    if (ok) log39.success(`killed shell "${shellLabel(target)}" in ${box.name}`);
+    else log39.warn(`no shell "${shellLabel(target)}" in ${box.name} (already gone?)`);
   } catch (err) {
     handleLifecycleError(err);
   }
@@ -9845,8 +10140,8 @@ shellCommand.addCommand(shellLsCommand);
 shellCommand.addCommand(shellKillCommand);
 
 // src/commands/start.ts
-import { Command as Command36 } from "commander";
-var startCommand = new Command36("start").description(
+import { Command as Command37 } from "commander";
+var startCommand = new Command37("start").description(
   "Start a stopped box. Docker: docker start + relaunch ctl/dockerd/vnc daemons. Cloud: backend.start, then re-resolve preview URLs/tokens, re-launch in-sandbox ctl/dockerd daemons, and re-register with the host relay (so the CloudBoxPoller resumes)."
 ).argument(
   "[box]",
@@ -9869,8 +10164,8 @@ var startCommand = new Command36("start").description(
 });
 
 // src/commands/status.ts
-import { log as log40 } from "@clack/prompts";
-import { Command as Command37 } from "commander";
+import { log as log41 } from "@clack/prompts";
+import { Command as Command38 } from "commander";
 
 // src/endpoints-render.ts
 function renderEndpointLines(endpoints, stream) {
@@ -9900,7 +10195,7 @@ function renderEndpointLines(endpoints, stream) {
 }
 
 // src/commands/inspect.ts
-import { log as log39 } from "@clack/prompts";
+import { log as log40 } from "@clack/prompts";
 function fmtLimit(n, unit) {
   return n && n > 0 ? `${String(n)}${unit}` : "unlimited";
 }
@@ -10045,7 +10340,7 @@ function renderCodexActivityCloud(persisted) {
 async function runInspect(box, opts) {
   try {
     if (opts.json && opts.watch) {
-      log39.error("cannot combine --json with --watch");
+      log40.error("cannot combine --json with --watch");
       process.exit(2);
     }
     const isCloud = (box.provider ?? "docker") !== "docker";
@@ -10082,14 +10377,14 @@ async function runInspect(box, opts) {
 
 // src/commands/status.ts
 var statusCommand2 = withWatchOptions(
-  new Command37("status").description("Show service + task status from a box's agentbox-ctl daemon").argument(
+  new Command38("status").description("Show service + task status from a box's agentbox-ctl daemon").argument(
     "[box]",
     "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
   ).option("-j, --json", "machine-readable JSON output").option("--inspect", "show detailed box info (volumes, limits, paths) instead of service/task status")
 ).action(async (idOrName, opts) => {
   try {
     if (opts.json && opts.watch) {
-      log40.error("cannot combine --json with --watch");
+      log41.error("cannot combine --json with --watch");
       process.exit(2);
     }
     const box = await resolveBoxOrExit(idOrName);
@@ -10256,8 +10551,8 @@ function renderPersisted2(s, state) {
 }
 
 // src/commands/stop.ts
-import { Command as Command38 } from "commander";
-var stopCommand = new Command38("stop").description(
+import { Command as Command39 } from "commander";
+var stopCommand = new Command39("stop").description(
   "Stop a box (Docker: docker stop; preserves upper + node_modules volumes. Cloud: backend.stop \u2014 sandbox stays in your account, disk preserved)."
 ).argument(
   "[box]",
@@ -10286,7 +10581,7 @@ restart with: agentbox start ${box.name}
 });
 
 // src/commands/top.ts
-import { Command as Command39 } from "commander";
+import { Command as Command40 } from "commander";
 var COLS = ["BOX", "STATE", "CPU%", "MEM USAGE / LIMIT", "MEM%", "PIDS", "DISK", "NET I/O"];
 function row(name, state, s) {
   const mem = `${fmtBytes(s.memUsedBytes)} / ${fmtBytes(s.memLimitBytes)}`;
@@ -10359,7 +10654,7 @@ async function renderProjectFooters() {
 
 SYSTEM: ${parts.join(" - ")}` : "";
 }
-var topCommand = new Command39("top").description("Live resource monitor (cpu/mem/pids/disk) for a box, the project, or every box").argument(
+var topCommand = new Command40("top").description("Live resource monitor (cpu/mem/pids/disk) for a box, the project, or every box").argument(
   "[box]",
   "box ref (default: every box on the host; --project narrows to the cwd's project)"
 ).option("-p, --project", "show only boxes in the cwd's project").option("--once", "print a single snapshot instead of watching").option("-j, --json", "machine-readable JSON (implies --once)").option("--interval <seconds>", "refresh interval", "2").action(async (idOrName, opts) => {
@@ -10392,8 +10687,8 @@ var topCommand = new Command39("top").description("Live resource monitor (cpu/me
 });
 
 // src/commands/unpause.ts
-import { Command as Command40 } from "commander";
-var unpauseCommand = new Command40("unpause").description(
+import { Command as Command41 } from "commander";
+var unpauseCommand = new Command41("unpause").description(
   "Resume a paused box. Docker: `docker unpause` (sub-second). Cloud: backend.resume (re-hydrates from archive \u2014 slower first time)."
 ).argument(
   "[box]",
@@ -10417,8 +10712,8 @@ var unpauseCommand = new Command40("unpause").description(
 
 // src/commands/update.ts
 import { spawn as spawn4 } from "child_process";
-import { confirm as confirm15, intro as intro8, isCancel as isCancel16, log as log41, outro as outro8, spinner as spinner9 } from "@clack/prompts";
-import { Command as Command41 } from "commander";
+import { confirm as confirm15, intro as intro8, isCancel as isCancel16, log as log42, outro as outro8, spinner as spinner9 } from "@clack/prompts";
+import { Command as Command42 } from "commander";
 
 // src/exec-method.ts
 function detectExecutionMethod(input) {
@@ -10462,7 +10757,7 @@ function runInherit(cmd, args) {
     child.on("close", (code) => resolveP(code ?? 0));
   });
 }
-var updateCommand = new Command41("self-update").description(
+var updateCommand = new Command42("self-update").description(
   "Update agentbox: self-update via npm/pnpm (unless run via npx), wipe the box image so it rebuilds, and reload the relay"
 ).option("-y, --yes", "skip the confirmation prompt").option("--dry-run", "show what would happen, don't change anything").option("--skip-self", "skip the package self-update; only refresh the image + relay").action(async (opts) => {
   try {
@@ -10472,7 +10767,7 @@ var updateCommand = new Command41("self-update").description(
     });
     intro8("agentbox self-update");
     const selfStep = opts.skipSelf ? "self-update: skipped (--skip-self)" : describeSelfUpdate(method);
-    log41.info(
+    log42.info(
       [
         "plan:",
         `  ${selfStep}`,
@@ -10487,25 +10782,25 @@ var updateCommand = new Command41("self-update").description(
     if (!opts.yes) {
       const ok = await confirm15({ message: "Proceed with update?", initialValue: true });
       if (isCancel16(ok) || !ok) {
-        log41.info("cancelled");
+        log42.info("cancelled");
         return;
       }
     }
     let selfUpdated = false;
     if (opts.skipSelf) {
-      log41.info("skipping self-update (--skip-self)");
+      log42.info("skipping self-update (--skip-self)");
     } else {
       const cmd = selfUpdateCommand(method);
       if (cmd === null) {
-        log41.info(describeSelfUpdate(method));
+        log42.info(describeSelfUpdate(method));
       } else {
-        log41.info(`running: ${cmd.cmd} ${cmd.args.join(" ")}`);
+        log42.info(`running: ${cmd.cmd} ${cmd.args.join(" ")}`);
         const code = await runInherit(cmd.cmd, cmd.args);
         if (code !== 0) {
           throw new Error(`${cmd.cmd} exited with code ${String(code)}`);
         }
         selfUpdated = true;
-        log41.success(`updated ${PKG} via ${cmd.cmd}`);
+        log42.success(`updated ${PKG} via ${cmd.cmd}`);
       }
     }
     const s = spinner9();
@@ -10521,7 +10816,7 @@ var updateCommand = new Command41("self-update").description(
       stop.stopped ? `stopped relay (pid ${String(stop.pid)})` : "relay was not running"
     );
     if (selfUpdated) {
-      log41.info(
+      log42.info(
         "relay will restart automatically (with the updated build) on your next `agentbox create` / `agentbox claude`"
       );
     } else {
@@ -10532,7 +10827,7 @@ var updateCommand = new Command41("self-update").description(
         sr2.stop(`relay back up on ${ep.hostUrl}`);
       } catch (err) {
         sr2.stop("relay restart failed");
-        log41.warn(
+        log42.warn(
           `${err instanceof Error ? err.message : String(err)} \u2014 it will retry on the next box command`
         );
       }
@@ -10545,8 +10840,8 @@ var updateCommand = new Command41("self-update").description(
 
 // src/commands/url.ts
 import { spawnSync as spawnSync5 } from "child_process";
-import { log as log42 } from "@clack/prompts";
-import { Command as Command42 } from "commander";
+import { log as log43 } from "@clack/prompts";
+import { Command as Command43 } from "commander";
 var SIGNED_URL_TTL_MIN2 = 1;
 var SIGNED_URL_TTL_MAX2 = 86400;
 function parseTtlOrExit2(raw) {
@@ -10559,7 +10854,7 @@ function parseTtlOrExit2(raw) {
   }
   return n;
 }
-var urlCommand = new Command42("url").description(
+var urlCommand = new Command43("url").description(
   "Open a box's web app URL in the browser, even when no service declares `expose:` (auto-unpause/start)"
 ).argument(
   "[box]",
@@ -10578,10 +10873,10 @@ var urlCommand = new Command42("url").description(
     if (provider === "docker") {
       const insp = await inspectBox(box.id);
       if (insp.state === "paused") {
-        log42.info("box is paused; unpausing");
+        log43.info("box is paused; unpausing");
         await unpauseBox(box.id);
       } else if (insp.state === "stopped") {
-        log42.info("box is stopped; starting");
+        log43.info("box is stopped; starting");
         await startBox(box.id);
       } else if (insp.state === "missing") {
         throw new Error(`box ${box.name} has no container; was it destroyed?`);
@@ -10610,10 +10905,10 @@ var urlCommand = new Command42("url").description(
       const p = await providerForBox(box);
       const state = await p.probeState(box);
       if (state === "paused") {
-        log42.info("box is paused; resuming");
+        log43.info("box is paused; resuming");
         await p.resume(box);
       } else if (state === "stopped") {
-        log42.info("box is stopped; starting");
+        log43.info("box is stopped; starting");
         await p.start(box);
       } else if (state === "missing") {
         throw new Error(`cloud sandbox for ${box.name} is missing; was it deleted?`);
@@ -10637,9 +10932,9 @@ var urlCommand = new Command42("url").description(
 });
 
 // src/commands/wait.ts
-import { log as log43 } from "@clack/prompts";
-import { Command as Command43 } from "commander";
-var waitCommand = new Command43("wait").description("Block until the box reports all autostart units ready").argument(
+import { log as log44 } from "@clack/prompts";
+import { Command as Command44 } from "commander";
+var waitCommand = new Command44("wait").description("Block until the box reports all autostart units ready").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).option("--timeout <ms>", "overall timeout in milliseconds", "120000").option("--units <names...>", "restrict to the named units").option("-j, --json", "machine-readable JSON output").action(async (idOrName, opts) => {
@@ -10655,7 +10950,7 @@ var waitCommand = new Command43("wait").description("Block until the box reports
     try {
       parsed = JSON.parse(proc.stdout);
     } catch {
-      log43.error(`agentbox-ctl wait-ready failed: ${proc.stderr || proc.stdout}`);
+      log44.error(`agentbox-ctl wait-ready failed: ${proc.stderr || proc.stdout}`);
       process.exit(1);
     }
     if (opts.json) {
@@ -10694,7 +10989,7 @@ function rewriteProviderPrefix(argv) {
 process.env.DOCKER_CLI_HINTS ??= "false";
 process.env.AGENTBOX_CLI_VERSION = AGENTBOX_VERSION;
 process.env.AGENTBOX_CLI_COMMIT = AGENTBOX_COMMIT;
-var program = new Command44();
+var program = new Command45();
 program.name("agentbox").description("Launch coding agents in isolated sandboxes").version(AGENTBOX_VERSION);
 program.enablePositionalOptions();
 program.addCommand(createCommand);
@@ -10732,6 +11027,7 @@ program.addCommand(relayCommand);
 program.addCommand(runQueuedJobCommand, { hidden: true });
 program.addCommand(daytonaCommand);
 program.addCommand(hetznerCommand);
+program.addCommand(vercelCommand);
 program.addCommand(dockerCommand);
 program.addCommand(updateCommand);
 program.addCommand(installCommand);