@madarco/agentbox 0.9.0 → 0.10.1

package/dist/index.js

@@ -28,11 +28,13 @@ import {
   agentSpecsForCloud,
   ensureAgentVolumesForCloud,
   listCloudCheckpoints,
+  probeCloudCheckpoint,
   resolveCloudCheckpoint,
   seedAgentVolumesIfFresh
-} from "./chunk-BXQMIEHC.js";
+} from "./chunk-M2UWJKFA.js";
 import {
   ADVANCED_HINT_GROUPS,
+  ALERT_BAND_ROWS,
   NEW_BOX_ID,
   NEW_BOX_LABEL,
   buildCloudAttachInnerCommand,
@@ -51,6 +53,7 @@ import {
   providerForBox,
   providerForCreate,
   pushTerminalTitle,
+  renderAlertBand,
   renderFooter,
   runWrappedAttach,
   setTerminalTitle,
@@ -58,11 +61,12 @@ import {
   statusLine,
   stripTitleGlyph,
   subscribePrompts
-} from "./chunk-GU5LW4B5.js";
+} from "./chunk-I7NOGCL4.js";
 import {
   AmbiguousBoxError,
   BOX_STATUS_EVENT,
   BoxNotFoundError,
+  CODEX_CREDENTIALS_BACKUP_FILE,
   ClaudeSessionError,
   CodexSessionError,
   DEFAULT_CODEX_SESSION,
@@ -72,6 +76,7 @@ import {
   DEFAULT_SHELL_SESSION,
   GH_PR_OPS,
   KEY_REGISTRY,
+  OPENCODE_CREDENTIALS_BACKUP_FILE,
   OPENCODE_FORWARDED_ENV_KEYS,
   OpencodeSessionError,
   SHARED_CLAUDE_VOLUME,
@@ -115,6 +120,8 @@ import {
   ensureOpencodeVolume,
   ensureRelay,
   execInBox,
+  extractCodexCredentials,
+  extractOpencodeCredentials,
   findProjectRoot,
   formatDetachNotice,
   getBoxHostPaths,
@@ -122,6 +129,7 @@ import {
   getRelayStatus,
   hashRpcParams,
   hostBackupHasCredentials,
+  hostClaudeBackupExpired,
   ideProfile,
   injectPrCreateHead,
   inspectBox,
@@ -199,7 +207,7 @@ import {
   waitForTmuxPaneContent,
   warmUpClaudeCredentials,
   writeJob
-} from "./chunk-NCJP5MTN.js";
+} from "./chunk-CDKVD6UO.js";
 import {
   DEFAULT_BOX_IMAGE,
   STATE_DIR,
@@ -207,15 +215,15 @@ import {
   imageInfo,
   readState,
   resolveBoxRef
-} from "./chunk-KL36BRN4.js";
+} from "./chunk-PWUVHPN6.js";
 import "./chunk-G3H2L3O2.js";
 
 // src/version.ts
-var AGENTBOX_VERSION = true ? "0.9.0" : "0.0.0-dev";
-var AGENTBOX_COMMIT = true ? "78c06a7" : "dev";
+var AGENTBOX_VERSION = true ? "0.10.1" : "0.0.0-dev";
+var AGENTBOX_COMMIT = true ? "1957cb4a" : "dev";
 
 // src/index.ts
-import { Command as Command45 } from "commander";
+import { Command as Command46 } from "commander";
 
 // src/engine-override.ts
 async function applyEngineOverrideAtStartup() {
@@ -275,7 +283,7 @@ function buildGroupedHelp(program2) {
       if (cmd) terms.push(term(cmd));
     }
   }
-  const pad3 = Math.max(0, ...terms.map((t) => t.length)) + 2;
+  const pad4 = Math.max(0, ...terms.map((t) => t.length)) + 2;
   const lines = ["Commands:"];
   for (const g of groups) {
     const title = g.hint ? `${g.title}  (${g.hint})` : g.title;
@@ -283,7 +291,7 @@ function buildGroupedHelp(program2) {
     for (const name of g.commands) {
       const cmd = byName.get(name);
       if (!cmd) continue;
-      lines.push(`    ${term(cmd).padEnd(pad3)}${cmd.description()}`);
+      lines.push(`    ${term(cmd).padEnd(pad4)}${cmd.description()}`);
     }
   }
   lines.push("", "Run `agentbox <command> --help` for command-specific options.");
@@ -681,6 +689,36 @@ function buildPromptArgs(agentKind, prompt, userArgs) {
   return resolveAgentLauncher(agentKind).buildArgs(prompt, userArgs);
 }
 
+// src/lib/skip-permissions.ts
+var CLAUDE_SKIP_PERMISSIONS_FLAG = "--dangerously-skip-permissions";
+var CODEX_SKIP_PERMISSIONS_FLAG = "--dangerously-bypass-approvals-and-sandbox";
+var CLAUDE_CONFLICTING = /* @__PURE__ */ new Set([CLAUDE_SKIP_PERMISSIONS_FLAG, "--permission-mode"]);
+var CODEX_CONFLICTING = /* @__PURE__ */ new Set([
+  CODEX_SKIP_PERMISSIONS_FLAG,
+  "--yolo",
+  "--full-auto",
+  "-a",
+  "--ask-for-approval",
+  "-s",
+  "--sandbox"
+]);
+function inject(args, flag, conflicting) {
+  const hasConflict = args.some((a) => {
+    const eq = a.indexOf("=");
+    return conflicting.has(eq === -1 ? a : a.slice(0, eq));
+  });
+  if (hasConflict) return args;
+  return [flag, ...args];
+}
+function applyClaudeSkipPermissions(args, cfg) {
+  if (!cfg.claude.dangerouslySkipPermissions) return args;
+  return inject(args, CLAUDE_SKIP_PERMISSIONS_FLAG, CLAUDE_CONFLICTING);
+}
+function applyCodexSkipPermissions(args, cfg) {
+  if (!cfg.codex.dangerouslySkipPermissions) return args;
+  return inject(args, CODEX_SKIP_PERMISSIONS_FLAG, CODEX_CONFLICTING);
+}
+
 // src/lib/queue/parse-max-option.ts
 function parseMaxOption(flag, raw) {
   if (raw === void 0) return void 0;
@@ -1523,16 +1561,16 @@ function extractCodexUuid(filename) {
   return m ? m[1] : null;
 }
 async function peekCodexCwd(file) {
-  let firstLine;
+  let firstLine2;
   try {
     const buf = await readFile3(file, "utf8");
     const nl = buf.indexOf("\n");
-    firstLine = nl === -1 ? buf : buf.slice(0, nl);
+    firstLine2 = nl === -1 ? buf : buf.slice(0, nl);
   } catch {
     return null;
   }
   try {
-    const parsed = JSON.parse(firstLine);
+    const parsed = JSON.parse(firstLine2);
     if (parsed.type === "session_meta" && typeof parsed.payload?.cwd === "string") {
       return parsed.payload.cwd;
     }
@@ -1812,12 +1850,34 @@ async function maybePromptPortless(args) {
 import { confirm as confirm2, isCancel as isCancel3, log as log8, multiselect } from "@clack/prompts";
 import { basename } from "path";
 
+// src/provider/cloud-backend.ts
+async function cloudBackendForProvider(provider) {
+  switch (provider) {
+    case "daytona":
+      return (await import("./dist-BD5QJRDC.js")).daytonaBackend;
+    case "hetzner":
+      return (await import("./dist-BNI5PQYK.js")).hetznerBackend;
+    case "vercel":
+      return (await import("./dist-SJHY3HYN.js")).vercelBackend;
+    default:
+      return null;
+  }
+}
+
 // src/checkpoint-lookup.ts
 async function checkpointExistsForProvider(provider, projectRoot, ref) {
   if (provider === "docker") {
     return await resolveCheckpoint(projectRoot, ref) !== null;
   }
-  return await resolveCloudCheckpoint(projectRoot, provider, ref) !== null;
+  if (await resolveCloudCheckpoint(projectRoot, provider, ref) === null) return false;
+  try {
+    const backend = await cloudBackendForProvider(provider);
+    if (!backend) return true;
+    const { live } = await probeCloudCheckpoint(backend, projectRoot, ref);
+    return live;
+  } catch {
+    return true;
+  }
 }
 
 // src/wizard.ts
@@ -1927,6 +1987,7 @@ function pickCreateOpts(opts) {
     sharedDockerCache: opts.sharedDockerCache,
     portless: opts.portless,
     sessionName: opts.sessionName,
+    dangerouslySkipPermissions: opts.dangerouslySkipPermissions,
     memory: opts.memory,
     cpus: opts.cpus,
     pidsLimit: opts.pidsLimit,
@@ -1969,6 +2030,8 @@ function buildClaudeCliOverrides(opts) {
   if (opts.sharedDockerCache === true) box.dockerCacheShared = true;
   const claude = {};
   if (opts.sessionName !== void 0) claude.sessionName = opts.sessionName;
+  if (opts.dangerouslySkipPermissions !== void 0)
+    claude.dangerouslySkipPermissions = opts.dangerouslySkipPermissions;
   const out = {};
   if (Object.keys(box).length > 0) out.box = box;
   if (Object.keys(claude).length > 0) out.claude = claude;
@@ -2018,6 +2081,34 @@ async function maybeRunClaudeLogin(args) {
   }
   log9.success("Signed in with your Claude subscription \u2014 saved for future boxes.");
 }
+async function maybeRunCloudClaudeLogin(args) {
+  if (!process.stdin.isTTY || args.yes) return;
+  if (args.authSource === "host-env") return;
+  const hasCreds = await hostBackupHasCredentials();
+  const expired = hasCreds && await hostClaudeBackupExpired();
+  if (hasCreds && !expired) return;
+  const message = expired ? "Your saved Claude login looks expired. Sign in again? (saved and reused by every box)" : "Sign in with your Claude subscription? (saved and reused by every box)";
+  const answer = await confirm3({ message, initialValue: true });
+  if (isCancel4(answer) || !answer) {
+    log9.info("Skipped sign-in \u2014 claude will prompt you to /login inside the box.");
+    return;
+  }
+  const s = spinner3();
+  s.start("preparing sandbox image");
+  await ensureImage(args.image, { onProgress: (line) => s.message(clampSpinnerLine(line)) });
+  s.message("preparing claude config");
+  await ensureClaudeVolume(
+    { volume: SHARED_CLAUDE_VOLUME },
+    { syncFromHost: true, image: args.image, hostWorkspace: args.hostWorkspace }
+  );
+  s.stop("image ready");
+  const exitCode = await runClaudeLoginContainer(args.image, ["--claudeai"]);
+  if (exitCode !== 0) {
+    log9.warn("Claude login did not complete; continuing \u2014 run `agentbox claude login` to retry.");
+    return;
+  }
+  log9.success("Signed in with your Claude subscription \u2014 saved for future boxes.");
+}
 var claudeCommand = new Command2("claude").description("Create a sandboxed box and launch Claude Code in a detachable tmux session").option("-w, --workspace <path>", "host workspace to mount", process.cwd()).option("-n, --name <name>", "friendly box name (default: <workspace-basename>-<id>)").option("--host-snapshot", "APFS-clone the host workspace into a per-box scratch dir before seeding /workspace (stabilizes the tar-pipe source)").option("--no-host-snapshot", "tar-pipe directly from the live host workspace at create time").option(
   "--snapshot <ref>",
   "start from a project checkpoint (see `agentbox checkpoint`); overrides box.defaultCheckpoint"
@@ -2032,6 +2123,12 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
   "--isolate-claude-config",
   "use a per-box ~/.claude volume instead of the shared agentbox-claude-config"
 ).option("--with-playwright", "also install @playwright/cli@latest globally inside the box").option(
+  "--dangerously-skip-permissions",
+  "launch claude with --dangerously-skip-permissions (auto-accept tool use); on by default since boxes are isolated"
+).option(
+  "--no-dangerously-skip-permissions",
+  "do not pass --dangerously-skip-permissions to claude in this box"
+).option(
   "--with-env",
   "copy host env/config files (.env*, secrets.toml, agentbox.yaml, ...) into /workspace at create time (gitignore-bypassing)"
 ).option("--no-vnc", "disable the per-box Xvnc + noVNC web client (on by default)").option(
@@ -2159,6 +2256,13 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
       yes: !!opts.yes,
       hostWorkspace: opts.workspace
     });
+  } else {
+    await maybeRunCloudClaudeLogin({
+      image: DEFAULT_BOX_IMAGE,
+      authSource: resolved.source,
+      yes: !!opts.yes,
+      hostWorkspace: opts.workspace
+    });
   }
   const portlessEnabled = isCloud ? void 0 : await maybePromptPortless({
     engine: await detectEngine(),
@@ -2198,6 +2302,7 @@ var claudeCommand = new Command2("claude").description("Create a sandboxed box a
   if (wiz.action === "launch-with-prompt" && wiz.initialPrompt) {
     effectiveClaudeArgs = buildPromptArgs("claude-code", wiz.initialPrompt, claudeArgs);
   }
+  effectiveClaudeArgs = applyClaudeSkipPermissions(effectiveClaudeArgs, cfg.effective);
   let fromBranch;
   let useBranch;
   try {
@@ -2385,6 +2490,12 @@ async function startOrAttachClaude(box, claudeArgs, opts, resumePrepared) {
   const attachIn = resolveAttachInOption(opts);
   const cliOverrides = {};
   if (opts.sessionName) cliOverrides.claude = { sessionName: opts.sessionName };
+  if (opts.dangerouslySkipPermissions !== void 0) {
+    cliOverrides.claude = {
+      ...cliOverrides.claude,
+      dangerouslySkipPermissions: opts.dangerouslySkipPermissions
+    };
+  }
   if (attachIn !== void 0) cliOverrides.attach = { openIn: attachIn };
   const cfg = await loadEffectiveConfig(box.workspacePath, { cliOverrides });
   const sessionName = cfg.effective.claude.sessionName;
@@ -2451,7 +2562,7 @@ async function startOrAttachClaude(box, claudeArgs, opts, resumePrepared) {
     volume: box.claudeConfigVolume ?? SHARED_CLAUDE_VOLUME,
     onProgress: (line) => s.message(clampSpinnerLine(line))
   });
-  let effectiveArgs = claudeArgs;
+  let effectiveArgs = applyClaudeSkipPermissions(claudeArgs, cfg.effective);
   if (resumePrepared) {
     s.message("uploading claude session into box");
     try {
@@ -2582,8 +2693,12 @@ var claudeStartCommand = new Command2("start").description(
         return;
       }
       const cfg = await loadEffectiveConfig(box.workspacePath, {
-        cliOverrides: attachIn ? { attach: { openIn: attachIn } } : {}
+        cliOverrides: {
+          ...attachIn ? { attach: { openIn: attachIn } } : {},
+          ...opts.dangerouslySkipPermissions !== void 0 ? { claude: { dangerouslySkipPermissions: opts.dangerouslySkipPermissions } } : {}
+        }
       });
+      effectiveClaudeArgs = applyClaudeSkipPermissions(effectiveClaudeArgs, cfg.effective);
       if (resumePrepared) {
         try {
           const provider = await providerForBox(box);
@@ -2655,11 +2770,11 @@ var CLOUD_BACKENDS = ["daytona", "hetzner", "vercel"];
 async function cloudProviderFor(backend) {
   switch (backend) {
     case "daytona":
-      return (await import("./dist-CX5CGVEB.js")).daytonaProvider;
+      return (await import("./dist-BD5QJRDC.js")).daytonaProvider;
     case "hetzner":
-      return (await import("./dist-GDHP34ZK.js")).hetznerProvider;
+      return (await import("./dist-BNI5PQYK.js")).hetznerProvider;
     case "vercel":
-      return (await import("./dist-XML54CNB.js")).vercelProvider;
+      return (await import("./dist-SJHY3HYN.js")).vercelProvider;
   }
 }
 var CHECKPOINT_NOTICE = "Checkpoint in progress \u2014 the box will be unresponsive for a moment";
@@ -2673,7 +2788,7 @@ var createSub = new Command3("create").description("Capture a box state as a pro
 ).option("--name <name>", "checkpoint name (default: <box-name>-<next>)").option("--merged", "flatten lower+upper into one tree instead of a layered delta").option("--set-default", "mark this checkpoint as the project default for new boxes").option(
   "--replace",
   "if a checkpoint with the same name exists, rm it first (idempotent recapture; safe to retry when the previous run's stdout was lost)"
-).action(async (idOrName, opts) => {
+).option("-y, --yes", 'skip the vercel "box will reboot" confirmation prompt').action(async (idOrName, opts) => {
   try {
     const box = await resolveBoxOrExit(idOrName);
     const providerName = box.provider ?? "docker";
@@ -2912,6 +3027,16 @@ async function runCloudCheckpointCreate(box, opts) {
   if (!provider.checkpoint) {
     throw new Error(`provider '${box.provider ?? "docker"}' doesn't support checkpoints`);
   }
+  if ((box.provider ?? "docker") === "vercel" && !opts.yes && process.stdin.isTTY) {
+    const ok = await confirm4({
+      message: "Create checkpoint? The vercel box will stop and reboot.",
+      initialValue: false
+    });
+    if (isCancel5(ok) || !ok) {
+      log10.info("cancelled");
+      return;
+    }
+  }
   const noticeId = await setRelayNotice(
     box.id,
     "checkpoint",
@@ -3016,10 +3141,10 @@ async function writeAgentboxSshAlias(opts) {
   await fs.writeFile(path, next, { mode: 384 });
   await fs.chmod(path, 384);
 }
-function parseSshTarget(argv) {
+function parseSshTarget(argv2) {
   let target;
-  for (let i = argv.length - 1; i >= 0; i--) {
-    const v = argv[i];
+  for (let i = argv2.length - 1; i >= 0; i--) {
+    const v = argv2[i];
     if (!v || v.startsWith("-")) continue;
     const at = v.indexOf("@");
     if (at <= 0) continue;
@@ -3028,9 +3153,9 @@ function parseSshTarget(argv) {
   }
   if (!target) return void 0;
   let identityFile;
-  for (let i = 0; i < argv.length - 1; i++) {
-    if (argv[i] === "-i") {
-      identityFile = argv[i + 1];
+  for (let i = 0; i < argv2.length - 1; i++) {
+    if (argv2[i] === "-i") {
+      identityFile = argv2[i + 1];
       break;
     }
   }
@@ -3258,6 +3383,9 @@ async function fetchServiceNamesDocker(container) {
 }
 
 // src/commands/codex.ts
+import { access } from "fs/promises";
+import { homedir as homedir8 } from "os";
+import { join as join10 } from "path";
 import { confirm as confirm5, intro as intro2, isCancel as isCancel6, log as log12, outro as outro3, spinner as spinner4 } from "@clack/prompts";
 import { Command as Command5 } from "commander";
 function reattachRef2(r) {
@@ -3276,6 +3404,7 @@ function pickCodexCreateOpts(opts) {
     sharedDockerCache: opts.sharedDockerCache,
     portless: opts.portless,
     sessionName: opts.sessionName,
+    dangerouslySkipPermissions: opts.dangerouslySkipPermissions,
     memory: opts.memory,
     cpus: opts.cpus,
     pidsLimit: opts.pidsLimit,
@@ -3310,6 +3439,8 @@ function buildCodexCliOverrides(opts) {
   if (opts.sharedDockerCache === true) box.dockerCacheShared = true;
   const codex = {};
   if (opts.sessionName !== void 0) codex.sessionName = opts.sessionName;
+  if (opts.dangerouslySkipPermissions !== void 0)
+    codex.dangerouslySkipPermissions = opts.dangerouslySkipPermissions;
   const out = {};
   if (Object.keys(box).length > 0) out.box = box;
   if (Object.keys(codex).length > 0) out.codex = codex;
@@ -3348,6 +3479,43 @@ async function maybeRunCodexLogin(args) {
   }
   log12.success("Signed in to Codex \u2014 saved for future boxes.");
 }
+async function cloudCodexCredAvailable(env = process.env) {
+  if ((env["OPENAI_API_KEY"] ?? "").length > 0) return true;
+  for (const p of [CODEX_CREDENTIALS_BACKUP_FILE, join10(homedir8(), ".codex", "auth.json")]) {
+    try {
+      await access(p);
+      return true;
+    } catch {
+    }
+  }
+  return false;
+}
+async function maybeRunCloudCodexLogin(args) {
+  if (!process.stdin.isTTY || args.yes) return;
+  if (await cloudCodexCredAvailable()) return;
+  const answer = await confirm5({
+    message: "Sign in to Codex? (saved and reused by every box)",
+    initialValue: true
+  });
+  if (isCancel6(answer) || !answer) {
+    log12.info("Skipped sign-in \u2014 codex will prompt you to sign in inside the box.");
+    return;
+  }
+  const s = spinner4();
+  s.start("preparing sandbox image");
+  await ensureImage(args.image, { onProgress: (line) => s.message(clampSpinnerLine(line)) });
+  s.message("preparing codex config");
+  await ensureCodexVolume({ volume: SHARED_CODEX_VOLUME }, { syncFromHost: true, image: args.image });
+  s.stop("image ready");
+  const exitCode = await runCodexLoginContainer(args.image, []);
+  if (exitCode !== 0) {
+    log12.warn("Codex login did not complete; continuing \u2014 run `agentbox codex login` to retry.");
+    return;
+  }
+  const { copied } = await extractCodexCredentials(SHARED_CODEX_VOLUME, args.image);
+  if (copied) log12.success("Signed in to Codex \u2014 saved for future boxes.");
+  else log12.warn("Codex login finished but no auth.json was captured \u2014 sign in inside the box if needed.");
+}
 var codexCommand = new Command5("codex").description("Create a sandboxed box and launch OpenAI Codex in a detachable tmux session").option("-w, --workspace <path>", "host workspace to mount", process.cwd()).option("-n, --name <name>", "friendly box name (default: <workspace-basename>-<id>)").option("--host-snapshot", "APFS-clone the host workspace into a per-box scratch dir before seeding /workspace (stabilizes the tar-pipe source)").option("--no-host-snapshot", "tar-pipe directly from the live host workspace at create time").option(
   "--snapshot <ref>",
   "start from a project checkpoint (see `agentbox checkpoint`); overrides box.defaultCheckpoint"
@@ -3362,6 +3530,12 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
   "--isolate-codex-config",
   "use a per-box ~/.codex volume instead of the shared agentbox-codex-config"
 ).option("--with-playwright", "also install @playwright/cli@latest globally inside the box").option(
+  "--dangerously-skip-permissions",
+  "launch codex with --dangerously-bypass-approvals-and-sandbox (never prompt for approval); on by default since boxes are isolated"
+).option(
+  "--no-dangerously-skip-permissions",
+  "do not pass --dangerously-bypass-approvals-and-sandbox to codex in this box"
+).option(
   "--with-env",
   "copy host env/config files (.env*, secrets.toml, agentbox.yaml, ...) into /workspace at create time (gitignore-bypassing)"
 ).option("--no-vnc", "disable the per-box Xvnc + noVNC web client (on by default)").option(
@@ -3521,6 +3695,7 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
     throw err;
   }
   if (isCloud) {
+    await maybeRunCloudCodexLogin({ image: DEFAULT_BOX_IMAGE, yes: !!opts.yes });
     const provider = await providerForCreate({ flag: opts.provider, config: cfg.effective });
     const withPlaywright = cfg.effective.box.withPlaywright || cfg.effective.browser.default !== "agent-browser";
     await cloudAgentCreate({
@@ -3542,7 +3717,7 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
       binary: "codex",
       sessionName: cfg.effective.codex.sessionName,
       mode: "codex",
-      extraArgs: codexArgs,
+      extraArgs: applyCodexSkipPermissions(codexArgs, cfg.effective),
       verbose: opts.verbose === true,
       openIn: cfg.effective.attach.openIn,
       attach: opts.attach !== false,
@@ -3613,7 +3788,7 @@ var codexCommand = new Command5("codex").description("Create a sandboxed box and
         cmdLog.write(line);
       }
     });
-    let effectiveCodexArgs = codexArgs;
+    let effectiveCodexArgs = applyCodexSkipPermissions(codexArgs, cfg.effective);
     if (resumePrepared) {
       s.message("uploading codex session into box");
       cmdLog.write("uploading codex session into box");
@@ -3685,6 +3860,12 @@ async function startOrAttachCodex(box, codexArgs, opts, resumePrepared) {
   const attachIn = resolveAttachInOption(opts);
   const cliOverrides = {};
   if (opts.sessionName) cliOverrides.codex = { sessionName: opts.sessionName };
+  if (opts.dangerouslySkipPermissions !== void 0) {
+    cliOverrides.codex = {
+      ...cliOverrides.codex,
+      dangerouslySkipPermissions: opts.dangerouslySkipPermissions
+    };
+  }
   if (attachIn !== void 0) cliOverrides.attach = { openIn: attachIn };
   const cfg = await loadEffectiveConfig(box.workspacePath, { cliOverrides });
   const sessionName = cfg.effective.codex.sessionName;
@@ -3736,7 +3917,7 @@ async function startOrAttachCodex(box, codexArgs, opts, resumePrepared) {
   await ensureCodexInstalled(box.container, {
     onProgress: (line) => s.message(clampSpinnerLine(line))
   });
-  let effectiveArgs = codexArgs;
+  let effectiveArgs = applyCodexSkipPermissions(codexArgs, cfg.effective);
   if (resumePrepared) {
     s.message("uploading codex session into box");
     try {
@@ -3857,8 +4038,12 @@ var codexStartCommand = new Command5("start").description(
         return;
       }
       const cfg = await loadEffectiveConfig(box.workspacePath, {
-        cliOverrides: attachIn ? { attach: { openIn: attachIn } } : {}
+        cliOverrides: {
+          ...attachIn ? { attach: { openIn: attachIn } } : {},
+          ...opts.dangerouslySkipPermissions !== void 0 ? { codex: { dangerouslySkipPermissions: opts.dangerouslySkipPermissions } } : {}
+        }
       });
+      effectiveCodexArgs = applyCodexSkipPermissions(effectiveCodexArgs, cfg.effective);
       if (resumePrepared) {
         try {
           const provider = await providerForBox(box);
@@ -3926,6 +4111,9 @@ codexCommand.addCommand(codexStartCommand);
 codexCommand.addCommand(codexLoginCommand);
 
 // src/commands/opencode.ts
+import { access as access2 } from "fs/promises";
+import { homedir as homedir9 } from "os";
+import { join as join11 } from "path";
 import { confirm as confirm6, intro as intro3, isCancel as isCancel7, log as log13, outro as outro4, spinner as spinner5 } from "@clack/prompts";
 import { Command as Command6 } from "commander";
 function reattachRef3(r) {
@@ -4019,6 +4207,48 @@ async function maybeRunOpencodeLogin(args) {
   }
   log13.success("Signed in to OpenCode \u2014 saved for future boxes.");
 }
+async function cloudOpencodeCredAvailable(env = process.env) {
+  for (const k of OPENCODE_FORWARDED_ENV_KEYS) {
+    if ((env[k] ?? "").length > 0) return true;
+  }
+  for (const p of [OPENCODE_CREDENTIALS_BACKUP_FILE, join11(homedir9(), ".local", "share", "opencode", "auth.json")]) {
+    try {
+      await access2(p);
+      return true;
+    } catch {
+    }
+  }
+  return false;
+}
+async function maybeRunCloudOpencodeLogin(args) {
+  if (!process.stdin.isTTY || args.yes) return;
+  if (await cloudOpencodeCredAvailable()) return;
+  const answer = await confirm6({
+    message: "Sign in to OpenCode? (pick a provider; saved and reused by every box)",
+    initialValue: true
+  });
+  if (isCancel7(answer) || !answer) {
+    log13.info("Skipped sign-in \u2014 opencode will prompt you to sign in inside the box.");
+    return;
+  }
+  const s = spinner5();
+  s.start("preparing sandbox image");
+  await ensureImage(args.image, { onProgress: (line) => s.message(clampSpinnerLine(line)) });
+  s.message("preparing opencode config");
+  await ensureOpencodeVolume(
+    { volume: SHARED_OPENCODE_VOLUME },
+    { syncFromHost: true, image: args.image }
+  );
+  s.stop("image ready");
+  const exitCode = await runOpencodeLoginContainer(args.image, []);
+  if (exitCode !== 0) {
+    log13.warn("OpenCode login did not complete; continuing \u2014 run `agentbox opencode login` to retry.");
+    return;
+  }
+  const { copied } = await extractOpencodeCredentials(SHARED_OPENCODE_VOLUME, args.image);
+  if (copied) log13.success("Signed in to OpenCode \u2014 saved for future boxes.");
+  else log13.warn("OpenCode login finished but no auth.json was captured \u2014 sign in inside the box if needed.");
+}
 var opencodeCommand = new Command6("opencode").description("Create a sandboxed box and launch OpenCode in a detachable tmux session").option("-w, --workspace <path>", "host workspace to mount", process.cwd()).option("-n, --name <name>", "friendly box name (default: <workspace-basename>-<id>)").option("--host-snapshot", "APFS-clone the host workspace into a per-box scratch dir before seeding /workspace (stabilizes the tar-pipe source)").option("--no-host-snapshot", "tar-pipe directly from the live host workspace at create time").option(
   "--snapshot <ref>",
   "start from a project checkpoint (see `agentbox checkpoint`); overrides box.defaultCheckpoint"
@@ -4177,6 +4407,7 @@ var opencodeCommand = new Command6("opencode").description("Create a sandboxed b
     throw err;
   }
   if (isCloud) {
+    await maybeRunCloudOpencodeLogin({ image: DEFAULT_BOX_IMAGE, yes: !!opts.yes });
     const provider = await providerForCreate({ flag: opts.provider, config: cfg.effective });
     const withPlaywright = cfg.effective.box.withPlaywright || cfg.effective.browser.default !== "agent-browser";
     await cloudAgentCreate({
@@ -4908,7 +5139,10 @@ async function attachShell(record) {
 var createCommand = new Command9("create").description("Create and start a new agent box (Docker container with /workspace seeded via in-container git worktree)").option("-w, --workspace <path>", "host workspace to mount", process.cwd()).option("-n, --name <name>", "friendly box name (default: <workspace-basename>-<id>)").option("--provider <name>", "sandbox backend: 'docker' (default) or 'daytona' (cloud)").option("--host-snapshot", "APFS-clone the host workspace into a per-box scratch dir before seeding /workspace (stabilizes the tar-pipe source)").option("--no-host-snapshot", "bind the live workspace directly (host edits leak into reads)").option(
   "--snapshot <ref>",
   "start from a project checkpoint (see `agentbox checkpoint`); overrides box.defaultCheckpoint"
-).option("--image <ref>", "override the box image", void 0).option("--attach", "drop into a shell inside the box after it is ready").option("--with-playwright", "also install @playwright/cli@latest globally inside the box").option(
+).option("--image <ref>", "override the box image", void 0).option(
+  "--build",
+  "build the docker base image locally instead of pulling the prebuilt one from the registry"
+).option("--attach", "drop into a shell inside the box after it is ready").option("--with-playwright", "also install @playwright/cli@latest globally inside the box").option(
   "--with-env",
   "copy host env/config files (.env*, secrets.toml, agentbox.yaml, ...) into /workspace at create time (gitignore-bypassing)"
 ).option("--no-vnc", "disable the per-box Xvnc + noVNC web client (on by default)").option(
@@ -5046,6 +5280,8 @@ var createCommand = new Command9("create").description("Create and start a new a
       name: opts.name,
       checkpointRef,
       image: cfg.effective.box.image,
+      allowPull: opts.build ? false : void 0,
+      imageRegistry: cfg.effective.box.imageRegistry,
       withPlaywright,
       withEnv: cfg.effective.box.withEnv,
       envFilesToImport: wiz.envFilesToImport,
@@ -5126,7 +5362,7 @@ var createCommand = new Command9("create").description("Create and start a new a
     }
     outro5("done");
     if (attachClaudeAfter) {
-      const { cloudAgentAttach: cloudAgentAttach2 } = await import("./_cloud-attach-ZXBCNWJX.js");
+      const { cloudAgentAttach: cloudAgentAttach2 } = await import("./_cloud-attach-2DGI6FUA.js");
       await cloudAgentAttach2({
         box: result.record,
         binary: "claude",
@@ -5169,13 +5405,16 @@ import { Command as Command10 } from "commander";
 var SIDEBAR_WIDTH = 33;
 var MIN_RIGHT_W = 20;
 var MIN_RIGHT_H = 4;
-function computeLayout(cols, rows) {
+function computeLayout(cols, rows, requestedAlertH = 0) {
   const sidebarW = Math.min(SIDEBAR_WIDTH, Math.max(0, cols - MIN_RIGHT_W - 1));
   const sepX = sidebarW;
   const rightX = sidebarW + 1;
   const rightW = Math.max(0, cols - rightX);
   const statusY = rows - 1;
-  const paneH = Math.max(0, statusY);
+  const desired = Math.max(0, requestedAlertH);
+  const alertH = statusY - desired >= MIN_RIGHT_H ? desired : 0;
+  const paneH = Math.max(0, statusY - alertH);
+  const alertY = statusY - alertH;
   return {
     cols,
     rows,
@@ -5183,6 +5422,8 @@ function computeLayout(cols, rows) {
     sepX,
     right: { x: rightX, y: 0, w: rightW, h: paneH },
     statusY,
+    alertH,
+    alertY,
     tooSmall: rightW < MIN_RIGHT_W || paneH < MIN_RIGHT_H
   };
 }
@@ -5478,6 +5719,21 @@ var BLANK = {
   strike: false
 };
 var PtySession = class {
+  /** Box this session attaches to. Identifies it in the compositor's pool. */
+  boxId;
+  /** When true, the compositor keeps this session alive (in its pool) across
+   *  box switches instead of disposing it — see {@link Compositor.liveSessions}. */
+  keepAlive;
+  /** Agent/shell mode of this attach. The compositor restores `activeMode`
+   *  (drives the footer) from this when re-showing a pooled session. */
+  mode;
+  /**
+   * Whether this session is the one currently shown in the right pane. A
+   * kept-alive hidden session (`active === false`) still consumes PTY output
+   * to keep its headless buffer current, but must NOT trigger right-pane
+   * repaints. The compositor flips this on show/hide.
+   */
+  active = true;
   term;
   pty;
   cleanup;
@@ -5485,7 +5741,10 @@ var PtySession = class {
   // Reused per cell read — valid only until the next cell() call (the renderer
   // consumes it synchronously within composeRow).
   out = { ...BLANK };
-  constructor(spawn5, TerminalClass, command, args, cols, rows, onRenderable, onExit, cleanup) {
+  constructor(spawn5, TerminalClass, boxId, keepAlive, mode, command, args, cols, rows, onRenderable, onExit, cleanup) {
+    this.boxId = boxId;
+    this.keepAlive = keepAlive;
+    this.mode = mode;
     this.term = new TerminalClass({
       cols,
       rows,
@@ -5501,13 +5760,15 @@ var PtySession = class {
       env: process.env
     });
     this.pty.onData((d) => {
-      this.term.write(d, () => onRenderable());
+      this.term.write(d, () => {
+        if (this.active) onRenderable();
+      });
     });
     this.term.onData((d) => {
       if (!this.disposed) this.pty.write(d);
     });
     this.pty.onExit(() => {
-      if (!this.disposed) onExit();
+      if (!this.disposed) onExit(this.boxId);
     });
   }
   write(bytes) {
@@ -5569,6 +5830,7 @@ var SB_AWAITING = SB_BG + "\x1B[38;5;51m\x1B[1m";
 var SGR_RESET = "\x1B[0m";
 var POLL_MS = 1e3;
 var FRAME_MS = 16;
+var KEEP_ALIVE_MAX = 6;
 var RESIZE_DEBOUNCE_MS = 120;
 var LEADER_LINGER_MS = 1500;
 var NOTICE_SPINNER_MS = 120;
@@ -5581,7 +5843,7 @@ var Compositor = class {
   constructor(deps, initialId) {
     this.deps = deps;
     this.selectedId = initialId;
-    this.layout = computeLayout(this.out.columns ?? 100, this.out.rows ?? 30);
+    this.layout = computeLayout(this.out.columns ?? 100, this.out.rows ?? 30, 0);
     this.parser = new InputParser({
       onEvent: (e) => {
         if (e.type === "leader") {
@@ -5642,7 +5904,17 @@ var Compositor = class {
   inp = process.stdin;
   boxes = [];
   selectedId;
+  /** The session currently shown in the right pane (may also be in
+   *  {@link liveSessions} when it's keep-alive). */
   session = null;
+  /**
+   * Pool of kept-alive sessions, keyed by box id, for providers whose attach
+   * is expensive to reconnect (vercel). Hidden entries keep their PTY + headless
+   * buffer alive so switching back is instant — no probe, no re-spawn. Map
+   * insertion order doubles as LRU recency (re-set on activate); bounded by
+   * {@link KEEP_ALIVE_MAX}. Reconnect-cheap providers never enter this map.
+   */
+  liveSessions = /* @__PURE__ */ new Map();
   placeholder = null;
   menu = null;
   lifecycleMenu = null;
@@ -5734,6 +6006,22 @@ var Compositor = class {
     } catch {
     }
     this.syncPromptSubscriptions();
+    this.reconcileLiveSessions();
+  }
+  /**
+   * Drop pooled (hidden) sessions whose box is gone or no longer running, so a
+   * paused/stopped/destroyed box can't keep its remote attach process alive.
+   * The *active* session is intentionally skipped — it's torn down on the next
+   * switch/re-resolve via {@link deactivateActive} (which checks box state),
+   * so evicting it here would blank the pane out from under the poll's
+   * re-resolve logic.
+   */
+  reconcileLiveSessions() {
+    for (const boxId of [...this.liveSessions.keys()]) {
+      if (this.session && this.session.boxId === boxId) continue;
+      const running = this.boxes.some((b) => b.id === boxId && b.state === "running");
+      if (!running) this.evictSession(boxId);
+    }
   }
   /**
    * Diff the current box list against {@link promptStreams}: subscribe to
@@ -5758,7 +6046,7 @@ var Compositor = class {
         let changed = this.activePrompts.delete(boxId);
         if (this.activeNotices.delete(boxId)) changed = true;
         if (this.activeNotices.size === 0) this.stopNoticeSpinner();
-        if (changed) this.drawChrome();
+        if (changed) this.redrawForAlert();
       }
     }
     for (const boxId of wanted) {
@@ -5769,21 +6057,21 @@ var Compositor = class {
         onPrompt: (ev) => {
           if (this.tornDown) return;
           this.activePrompts.set(boxId, ev);
-          this.drawChrome();
+          this.redrawForAlert();
         },
         onResolved: (id) => {
           if (this.tornDown) return;
           const current = this.activePrompts.get(boxId);
           if (current && current.id === id) {
             this.activePrompts.delete(boxId);
-            this.drawChrome();
+            this.redrawForAlert();
           }
         },
         onNotice: (ev) => {
           if (this.tornDown) return;
           this.activeNotices.set(boxId, ev);
           this.startNoticeSpinner();
-          this.drawChrome();
+          this.redrawForAlert();
         },
         onNoticeCleared: (id) => {
           if (this.tornDown) return;
@@ -5791,7 +6079,7 @@ var Compositor = class {
           if (current && current.id === id) {
             this.activeNotices.delete(boxId);
             if (this.activeNotices.size === 0) this.stopNoticeSpinner();
-            this.drawChrome();
+            this.redrawForAlert();
           }
         },
         onError: () => {
@@ -5818,9 +6106,11 @@ var Compositor = class {
     return this.boxes.find((b) => b.id === this.selectedId);
   }
   async poll() {
-    const before = JSON.stringify(
+    const stateKey = () => JSON.stringify(
       this.boxes.map((b) => [b.id, b.state, b.activity, b.sessionTitle])
     );
+    const before = stateKey();
+    const beforeAlertH = this.alertHeight();
     await this.refreshBoxes();
     if (this.busy) {
     } else if (!this.boxes.some((b) => b.id === this.selectedId) && this.boxes[0]) {
@@ -5832,19 +6122,99 @@ var Compositor = class {
       const reresolve = this.session && !running || this.placeholder && running || this.menu && !running || this.lifecycleMenu != null && box?.state !== this.lifecycleMenu.state;
       if (reresolve) await this.spawnActive();
     }
-    if (JSON.stringify(
-      this.boxes.map((b) => [b.id, b.state, b.activity, b.sessionTitle])
-    ) !== before) {
+    const stateChanged = stateKey() !== before;
+    const alertChanged = this.alertHeight() !== beforeAlertH;
+    if (alertChanged) {
+      this.relayout();
+    } else if (stateChanged) {
       this.drawChrome();
     }
   }
-  disposeSession() {
-    if (!this.session) return;
-    this.session.dispose();
+  /**
+   * Detach the active session from view. Keep-alive sessions (those in
+   * {@link liveSessions}) stay running in the background; everything else is
+   * disposed — matching the pre-pool dispose-on-switch behaviour for docker /
+   * hetzner / daytona.
+   */
+  deactivateActive() {
+    const s = this.session;
+    if (!s) return;
+    s.active = false;
+    const pooled = this.liveSessions.get(s.boxId) === s;
+    const boxRunning = this.boxes.some((b) => b.id === s.boxId && b.state === "running");
+    if (!pooled || !boxRunning) {
+      if (pooled) this.liveSessions.delete(s.boxId);
+      s.dispose();
+    }
+    this.session = null;
+  }
+  /** Dispose and drop the pooled session for `boxId` (box gone / stopped /
+   *  its attach died). Clears the active reference if it was the shown one. */
+  evictSession(boxId) {
+    const pooled = this.liveSessions.get(boxId);
+    if (pooled) {
+      this.liveSessions.delete(boxId);
+      pooled.dispose();
+    }
+    if (this.session && this.session.boxId === boxId) {
+      if (this.session !== pooled) this.session.dispose();
+      this.session = null;
+    }
+  }
+  /** Bound the pool: evict least-recently-used pooled sessions (Map insertion
+   *  order) until at most {@link KEEP_ALIVE_MAX} remain, never the active one. */
+  evictLruIfNeeded() {
+    for (const boxId of this.liveSessions.keys()) {
+      if (this.liveSessions.size <= KEEP_ALIVE_MAX) break;
+      if (this.session && this.session.boxId === boxId) continue;
+      this.evictSession(boxId);
+    }
+  }
+  /** Dispose the active session plus every pooled one (teardown). */
+  disposeAllSessions() {
+    const active = this.session;
+    if (active && this.liveSessions.get(active.boxId) !== active) active.dispose();
     this.session = null;
+    for (const s of this.liveSessions.values()) s.dispose();
+    this.liveSessions.clear();
+  }
+  /**
+   * Show a pooled session in the right pane — the fast switch-back path: no
+   * probe, no re-spawn, instant repaint from its already-current headless
+   * buffer. Re-marks it most-recently-used and re-applies the current layout
+   * size (it may have changed while hidden).
+   */
+  activateSession(sess) {
+    this.deactivateActive();
+    this.placeholder = null;
+    this.menu = null;
+    this.lifecycleMenu = null;
+    this.createMenu = null;
+    this.pendingConfirm = null;
+    this.session = sess;
+    sess.active = true;
+    this.activeMode = sess.mode;
+    sess.resize(Math.max(1, this.layout.right.w), Math.max(1, this.layout.right.h));
+    this.liveSessions.delete(sess.boxId);
+    this.liveSessions.set(sess.boxId, sess);
+    this.prevRows = null;
+    if (!this.syncAlertLayout()) this.drawChrome();
+    this.scheduleRender();
+  }
+  /**
+   * Show the selected box. If a kept-alive session is pooled for it, re-show it
+   * synchronously (instant). Otherwise fall through to the async resolve+spawn.
+   */
+  showSelected() {
+    const cached = this.liveSessions.get(this.selectedId);
+    if (cached) {
+      this.activateSession(cached);
+      return;
+    }
+    void this.spawnActive();
   }
   async spawnActive() {
-    this.disposeSession();
+    this.deactivateActive();
     this.placeholder = null;
     this.menu = null;
     this.lifecycleMenu = null;
@@ -5858,25 +6228,37 @@ var Compositor = class {
   }
   /** Turn a resolved/started target into the right-pane state. */
   applyTarget(target) {
-    this.disposeSession();
+    this.deactivateActive();
     this.placeholder = null;
     this.menu = null;
     this.lifecycleMenu = null;
     this.createMenu = null;
     this.pendingConfirm = null;
     if (target.kind === "attach") {
-      this.activeMode = target.mode ?? "claude";
+      const boxId = this.selectedId;
+      const mode = target.mode ?? "claude";
+      const keepAlive = target.keepAlive ?? false;
+      this.activeMode = mode;
       this.session = new PtySession(
         this.deps.ptySpawn,
         this.deps.termCtor,
+        boxId,
+        keepAlive,
+        mode,
         target.command,
         target.args,
         Math.max(1, this.layout.right.w),
         Math.max(1, this.layout.right.h),
         () => this.scheduleRender(),
-        () => this.onSessionExit(),
+        (id) => this.onSessionExit(id),
         target.cleanup
       );
+      if (keepAlive) {
+        const prev = this.liveSessions.get(boxId);
+        if (prev && prev !== this.session) prev.dispose();
+        this.liveSessions.set(boxId, this.session);
+        this.evictLruIfNeeded();
+      }
     } else if (target.kind === "menu") {
       this.menu = { boxName: this.selectedBox()?.name ?? this.selectedId };
     } else if (target.kind === "lifecycle-menu") {
@@ -5891,7 +6273,7 @@ var Compositor = class {
       this.placeholder = target.lines;
     }
     this.prevRows = null;
-    this.drawChrome();
+    if (!this.syncAlertLayout()) this.drawChrome();
     this.scheduleRender();
   }
   handleMenuKey(bytes) {
@@ -6224,8 +6606,9 @@ var Compositor = class {
     }, 2500);
     this.drawChrome();
   }
-  onSessionExit() {
-    this.disposeSession();
+  onSessionExit(boxId) {
+    this.evictSession(boxId);
+    if (boxId !== this.selectedId) return;
     this.placeholder = ["", "  session ended \u2014 Ctrl-a \u2191/\u2193 to switch boxes"];
     this.prevRows = null;
     this.scheduleRender();
@@ -6241,7 +6624,7 @@ var Compositor = class {
     const next = dir === "prev" ? (i - 1 + n) % n : (i + 1) % n;
     this.selectedId = this.boxes[next].id;
     this.drawChrome();
-    void this.spawnActive();
+    this.showSelected();
   }
   /** Blank the right pane and drop the diff cache (next paint is full). */
   clearRightPane() {
@@ -6341,8 +6724,36 @@ var Compositor = class {
     }
     for (let y = 0; y < sidebar.h; y++)
       s += cursorTo2(sepX, y) + SB_HEADER + (y === 0 ? "\u256E" : "\u2502") + SGR_RESET;
-    let status;
     const activePromptForSelected = this.activePrompts.get(this.selectedId);
+    const activeNoticeForSelected = this.activeNotices.get(this.selectedId);
+    if (this.layout.alertH > 0) {
+      const bandRows = this.layout.alertH;
+      let bandLines = null;
+      if (activePromptForSelected) {
+        bandLines = renderAlertBand(
+          { kind: "prompt", prompt: activePromptForSelected },
+          this.layout.cols,
+          bandRows
+        );
+      } else if (activeNoticeForSelected) {
+        bandLines = renderAlertBand(
+          { kind: "notice", message: activeNoticeForSelected.message, frame: this.noticeFrame },
+          this.layout.cols,
+          bandRows
+        );
+      } else {
+        const q = this.selectedBox()?.claudeQuestion;
+        if (q) {
+          bandLines = renderAlertBand({ kind: "question", question: q }, this.layout.cols, bandRows);
+        }
+      }
+      if (bandLines) {
+        for (let i = 0; i < bandLines.length; i++) {
+          s += cursorTo2(0, this.layout.alertY + i) + bandLines[i] + SGR_RESET;
+        }
+      }
+    }
+    let status;
     if (this.pendingConfirm) {
       const w = this.layout.cols;
       const txt = ` Destroy ${this.pendingConfirm.name}?  y = confirm  \xB7  any other key = cancel `.slice(0, w).padEnd(w);
@@ -6351,15 +6762,14 @@ var Compositor = class {
       const w = this.layout.cols;
       const txt = ` ${this.flashMsg} `.slice(0, w).padEnd(w);
       status = `\x1B[7m${txt}\x1B[0m`;
-    } else if (activePromptForSelected) {
+    } else if (this.layout.alertH === 0 && activePromptForSelected) {
       status = renderFooter(
         { kind: "prompt", prompt: activePromptForSelected },
         this.layout.cols
       );
-    } else if (this.activeNotices.has(this.selectedId)) {
-      const notice = this.activeNotices.get(this.selectedId);
+    } else if (this.layout.alertH === 0 && activeNoticeForSelected) {
       status = renderFooter(
-        { kind: "notice", message: notice.message, frame: this.noticeFrame },
+        { kind: "notice", message: activeNoticeForSelected.message, frame: this.noticeFrame },
         this.layout.cols
       );
     } else {
@@ -6382,17 +6792,62 @@ var Compositor = class {
     if (this.resizeTimer) clearTimeout(this.resizeTimer);
     this.resizeTimer = setTimeout(() => {
       this.resizeTimer = null;
-      this.layout = computeLayout(this.out.columns ?? 100, this.out.rows ?? 30);
-      this.prevRows = null;
-      const r = this.layout.right;
-      if (this.session && !this.layout.tooSmall) {
-        this.session.resize(Math.max(1, r.w), Math.max(1, r.h));
-      }
-      this.out.write(SYNC_BEGIN + "\x1B[2J" + SYNC_END);
-      this.drawChrome();
-      this.render();
+      this.relayout();
     }, RESIZE_DEBOUNCE_MS);
   }
+  /**
+   * Requested band height for the currently-selected box. Returns
+   * `ALERT_BAND_ROWS` when the box has an active relay prompt, an active
+   * notice (checkpoint), or claude is in the `question` state with a payload;
+   * 0 otherwise. The layout silently drops the band to 0 if reserving it
+   * would push the right pane below MIN_RIGHT_H.
+   */
+  alertHeight() {
+    const id = this.selectedId;
+    if (this.activePrompts.has(id)) return ALERT_BAND_ROWS;
+    if (this.activeNotices.has(id)) return ALERT_BAND_ROWS;
+    const box = this.selectedBox();
+    if (box?.claudeQuestion) return ALERT_BAND_ROWS;
+    return 0;
+  }
+  /**
+   * Recompute the layout against the current alert height, resize the inner
+   * session, and repaint. Called from `scheduleResize` (terminal resize) and
+   * from {@link syncAlertLayout} when the selected box's alert state flips.
+   */
+  relayout() {
+    this.layout = computeLayout(
+      this.out.columns ?? 100,
+      this.out.rows ?? 30,
+      this.alertHeight()
+    );
+    this.prevRows = null;
+    const r = this.layout.right;
+    if (this.session && !this.layout.tooSmall) {
+      this.session.resize(Math.max(1, r.w), Math.max(1, r.h));
+    }
+    this.out.write(SYNC_BEGIN + "\x1B[2J" + SYNC_END);
+    this.drawChrome();
+    this.render();
+  }
+  /**
+   * If the selected box's alert state implies a different band height than
+   * the current layout, run a full {@link relayout}; otherwise return false
+   * so the caller can take the lighter `drawChrome()` path. Used by all
+   * alert-state transitions (SSE handlers, poll, selection change).
+   */
+  syncAlertLayout() {
+    if (this.alertHeight() !== this.layout.alertH) {
+      this.relayout();
+      return true;
+    }
+    return false;
+  }
+  /** Common path for alert-state transitions: relayout when the band's
+   *  visibility changes, drawChrome only when it doesn't. */
+  redrawForAlert() {
+    if (!this.syncAlertLayout()) this.drawChrome();
+  }
   teardown() {
     if (this.tornDown) return;
     this.tornDown = true;
@@ -6407,7 +6862,7 @@ var Compositor = class {
     this.activePrompts.clear();
     this.activeNotices.clear();
     this.parser.dispose();
-    this.disposeSession();
+    this.disposeAllSessions();
     this.inp.off("data", this.onData);
     this.out.off("resize", this.onResize);
     if (this.inp.isTTY) this.inp.setRawMode(false);
@@ -6419,6 +6874,9 @@ var Compositor = class {
 };
 
 // src/commands/dashboard.ts
+function providerSupportsKeepAlive(provider) {
+  return provider === "vercel";
+}
 function sortBoxes(boxes) {
   return [...boxes].sort((a, b) => {
     const ap = a.projectRoot ?? "";
@@ -6455,7 +6913,10 @@ function toSidebar(b) {
     activity: agent.activity,
     sessionTitle: agent.sessionTitle,
     index: b.projectIndex,
-    project: b.projectRoot
+    project: b.projectRoot,
+    // Only claude reports an AskUserQuestion payload; gated on claudeActivity
+    // === 'question' upstream (lifecycle.listBoxes) so it's undefined otherwise.
+    claudeQuestion: b.claudeQuestion
   };
 }
 var dashboardCommand = new Command10("dashboard").description("Box list + the selected box live Agent session").argument("[box]", "initial box (default: first running box; -p restricts to the cwd project)").option("-p, --project", "only this project's boxes (default: all boxes globally)").action(async (idOrName, opts) => {
@@ -6578,7 +7039,8 @@ var dashboardCommand = new Command10("dashboard").description("Box list + the se
         command: spec.argv[0],
         args: spec.argv.slice(1),
         ...spec.cleanup ? { cleanup: spec.cleanup } : {},
-        mode: which
+        mode: which,
+        ...providerSupportsKeepAlive(record.provider) ? { keepAlive: true } : {}
       };
     };
     const isCloudBox = (box) => (box.provider ?? "docker") !== "docker";
@@ -6612,7 +7074,12 @@ var dashboardCommand = new Command10("dashboard").description("Box list + the se
         { volume: claudeVolume },
         { image: box.image, isolate: claudeVolume !== SHARED_CLAUDE_VOLUME }
       );
-      await startClaudeSession({ container: box.container, claudeArgs: [], boxName: box.name });
+      const claudeCfg = await loadEffectiveConfig(box.workspacePath);
+      await startClaudeSession({
+        container: box.container,
+        claudeArgs: applyClaudeSkipPermissions([], claudeCfg.effective),
+        boxName: box.name
+      });
       const info = await claudeSessionInfo(box.container);
       await waitForTmuxPaneContent(box.container, info.sessionName);
       return {
@@ -6629,7 +7096,11 @@ var dashboardCommand = new Command10("dashboard").description("Box list + the se
       }
       await ensureCodexInstalled(box.container);
       if (box.codexConfigVolume) await seedCodexHooks(box.codexConfigVolume, box.image);
-      await startCodexSession({ container: box.container, codexArgs: [] });
+      const codexCfg = await loadEffectiveConfig(box.workspacePath);
+      await startCodexSession({
+        container: box.container,
+        codexArgs: applyCodexSkipPermissions([], codexCfg.effective)
+      });
       await waitForTmuxPaneContent(box.container, DEFAULT_CODEX_SESSION);
       return {
         kind: "attach",
@@ -6698,7 +7169,10 @@ var dashboardCommand = new Command10("dashboard").description("Box list + the se
       if (!agent) return { boxId: result.record.id };
       if (agent === "codex") {
         await ensureCodexInstalled(ctr, { onProgress });
-        await startCodexSession({ container: ctr, codexArgs: [] });
+        await startCodexSession({
+          container: ctr,
+          codexArgs: applyCodexSkipPermissions([], cfg.effective)
+        });
         await waitForTmuxPaneContent(ctr, DEFAULT_CODEX_SESSION);
         return {
           boxId: result.record.id,
@@ -6725,7 +7199,11 @@ var dashboardCommand = new Command10("dashboard").description("Box list + the se
         };
       }
       await rebuildPluginNativeDeps(ctr, { volume: result.record.claudeConfigVolume });
-      await startClaudeSession({ container: ctr, claudeArgs: [], boxName: result.record.name });
+      await startClaudeSession({
+        container: ctr,
+        claudeArgs: applyClaudeSkipPermissions([], cfg.effective),
+        boxName: result.record.name
+      });
       const info = await claudeSessionInfo(ctr);
       await waitForTmuxPaneContent(ctr, info.sessionName);
       return {
@@ -7801,11 +8279,11 @@ function resolveToken(raw) {
 // src/lib/drive/tmux.ts
 var TMUX_USER = "vscode";
 async function captureSession(provider, box, session, opts = {}) {
-  const argv = ["tmux", "capture-pane", opts.ansi ? "-pe" : "-p", "-t", session];
+  const argv2 = ["tmux", "capture-pane", opts.ansi ? "-pe" : "-p", "-t", session];
   if (opts.rows) {
-    argv.push("-S", String(opts.rows.from), "-E", String(opts.rows.to));
+    argv2.push("-S", String(opts.rows.from), "-E", String(opts.rows.to));
   }
-  const res = await provider.exec(box, argv, { user: TMUX_USER });
+  const res = await provider.exec(box, argv2, { user: TMUX_USER });
   if (res.exitCode !== 0) {
     throw new Error(failure("capture-pane", session, res.stderr || res.stdout));
   }
@@ -8062,8 +8540,8 @@ function sleep2(ms) {
 import { log as log28 } from "@clack/prompts";
 import { Command as Command23 } from "commander";
 import { existsSync as existsSync4, readdirSync, statSync } from "fs";
-import { homedir as homedir8 } from "os";
-import { join as join10 } from "path";
+import { homedir as homedir10 } from "os";
+import { join as join12 } from "path";
 var FORK_AGENTS = ["claude", "codex", "opencode"];
 var AGENT_COMMAND = {
   claude: claudeCommand,
@@ -8083,12 +8561,12 @@ function resolveSessionArgs(agent, opts) {
   }
   if (opts.session) return ["--resume", opts.session];
   if (agent === "codex") return ["--continue"];
-  const dir = join10(homedir8(), ".claude", "projects", encodeClaudeProjectsDir(opts.workspace));
+  const dir = join12(homedir10(), ".claude", "projects", encodeClaudeProjectsDir(opts.workspace));
   if (!existsSync4(dir)) return ["--continue"];
   const now = Date.now();
   const recent = readdirSync(dir).filter((f) => f.endsWith(".jsonl")).map((f) => {
     try {
-      return statSync(join10(dir, f)).mtimeMs;
+      return statSync(join12(dir, f)).mtimeMs;
     } catch {
       return 0;
     }
@@ -8166,115 +8644,1010 @@ var forkCommand = new Command23("fork").description(
 });
 
 // src/commands/install.ts
-import { intro as intro5, log as log29, outro as outro6 } from "@clack/prompts";
-import { Command as Command24 } from "commander";
-import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync, writeFileSync as writeFileSync3 } from "fs";
-import { homedir as homedir9 } from "os";
-import { dirname, join as join11, resolve as resolve2 } from "path";
+import { confirm as confirm14, intro as intro6, isCancel as isCancel15, log as log30, note, outro as outro6, select as select2, spinner as spinner8 } from "@clack/prompts";
+import { Command as Command25 } from "commander";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync, writeFileSync as writeFileSync4 } from "fs";
+import { homedir as homedir13 } from "os";
+import { dirname as dirname2, join as join15, resolve as resolve2 } from "path";
 import { fileURLToPath } from "url";
-var MANAGED_SENTINEL = "<!-- agentbox-managed:v1 -->";
-var LEGACY_INFO_MARKER = "Drive AgentBox from the host:";
-function installTargets() {
-  const home = homedir9();
-  const claudeSkills = join11(home, ".claude", "skills");
-  return [
-    { src: join11("agentbox", "SKILL.md"), dest: join11(claudeSkills, "agentbox", "SKILL.md") },
-    { src: join11("agentbox-info", "SKILL.md"), dest: join11(claudeSkills, "agentbox-info", "SKILL.md") },
-    {
-      src: join11("codex", "agentbox.md"),
-      dest: join11(home, ".codex", "prompts", "agentbox.md"),
-      gateDir: join11(home, ".codex")
-    },
-    {
-      src: join11("opencode", "agentbox.md"),
-      dest: join11(home, ".config", "opencode", "commands", "agentbox.md"),
-      gateDir: join11(home, ".config", "opencode")
-    }
-  ];
-}
-function resolveHostSkillsDir() {
-  const here = dirname(fileURLToPath(import.meta.url));
-  const candidates = [
-    resolve2(here, "..", "share", "host-skills"),
-    // bundled: dist/ -> ../share
-    resolve2(here, "..", "..", "share", "host-skills")
-    // src: src/commands/ -> ../../share
-  ];
-  for (const c of candidates) {
-    if (existsSync5(c)) return c;
+
+// src/lib/doctor-checks.ts
+import { accessSync, constants as fsConstants, mkdirSync as mkdirSync3 } from "fs";
+import { homedir as homedir11 } from "os";
+import { join as join13 } from "path";
+import { execa as execa2 } from "execa";
+var ALL_PROVIDERS = ["docker", "daytona", "hetzner", "vercel"];
+var NODE_MIN_MAJOR = 20;
+var NODE_MIN_MINOR = 10;
+async function probeVersion(bin, args = ["--version"]) {
+  try {
+    const r = await execa2(bin, args, { reject: false });
+    if (r.exitCode !== 0) return null;
+    const out = `${r.stdout ?? ""}${r.stderr ?? ""}`.trim().split("\n")[0] ?? "";
+    return out.length > 0 ? out : bin;
+  } catch {
+    return null;
   }
-  throw new Error(
-    `could not locate bundled host skills; tried:
-  ${candidates.join("\n  ")}`
-  );
 }
-function writableReason(target, force) {
-  if (!existsSync5(target)) return "new";
-  const existing = readFileSync(target, "utf8");
-  if (existing.includes(MANAGED_SENTINEL) || existing.includes(LEGACY_INFO_MARKER)) {
-    return "managed";
-  }
-  return force ? "forced" : "skip";
+function parseNodeMajorMinor(v) {
+  const m = /^v?(\d+)\.(\d+)/.exec(v);
+  if (!m) return [0, 0];
+  return [Number(m[1]), Number(m[2])];
 }
-var installCommand = new Command24("install").description(
-  "Install AgentBox's host-side /agentbox fork command into Claude (~/.claude/skills), and \u2014 when detected \u2014 into Codex (~/.codex/prompts) and OpenCode (~/.config/opencode/commands). Idempotent."
-).option("--force", "overwrite existing files even if not AgentBox-managed").option("--dry-run", "print what would be written without changing anything").action((opts) => {
-  intro5("Installing AgentBox host commands...");
-  const force = opts.force === true;
-  const dryRun = opts.dryRun === true;
-  let srcDir;
+function firstLine(s) {
+  const i = s.indexOf("\n");
+  return i === -1 ? s : s.slice(0, i);
+}
+function errSummary(err) {
+  return err instanceof Error ? firstLine(err.message) : String(err);
+}
+function checkNode() {
+  const v = process.versions.node;
+  const [maj, min] = parseNodeMajorMinor(v);
+  const ok = maj > NODE_MIN_MAJOR || maj === NODE_MIN_MAJOR && min >= NODE_MIN_MINOR;
+  return {
+    label: "node",
+    status: ok ? "ok" : "fail",
+    detail: ok ? `v${v}` : `v${v} (need >=${String(NODE_MIN_MAJOR)}.${String(NODE_MIN_MINOR)})`,
+    hint: ok ? void 0 : "upgrade Node before continuing"
+  };
+}
+function checkPlatform() {
+  return { label: "platform", status: "ok", detail: `${process.platform}/${process.arch}` };
+}
+function checkAgentboxHome() {
+  const dir = join13(homedir11(), ".agentbox");
   try {
-    srcDir = resolveHostSkillsDir();
+    mkdirSync3(dir, { recursive: true });
+    accessSync(dir, fsConstants.W_OK);
+    return { label: "~/.agentbox", status: "ok", detail: dir };
   } catch (err) {
-    log29.error(err instanceof Error ? err.message : String(err));
-    process.exit(1);
+    return {
+      label: "~/.agentbox",
+      status: "fail",
+      detail: `not writable: ${err instanceof Error ? err.message : String(err)}`,
+      hint: "check directory permissions"
+    };
   }
-  const written = [];
-  let skipped = 0;
+}
+async function checkGit() {
+  const v = await probeVersion("git");
+  return v ? { label: "git", status: "ok", detail: v } : {
+    label: "git",
+    status: "warn",
+    detail: "not found",
+    hint: "install git \u2014 required for the workspace git-bundle seed"
+  };
+}
+async function checkSsh() {
+  const v = await probeVersion("ssh", ["-V"]);
+  return v ? { label: "ssh", status: "ok", detail: v } : {
+    label: "ssh",
+    status: "warn",
+    detail: "not found",
+    hint: "install ssh \u2014 required for hetzner and cloud attach"
+  };
+}
+async function runSystemChecks() {
+  const [git, ssh] = await Promise.all([checkGit(), checkSsh()]);
+  return [checkNode(), checkPlatform(), checkAgentboxHome(), git, ssh];
+}
+async function dockerChecks() {
+  const cli = await probeVersion("docker");
+  if (!cli) {
+    return [
+      {
+        label: "docker cli",
+        status: "warn",
+        detail: "not found",
+        hint: "install Docker Desktop, OrbStack, or docker engine"
+      }
+    ];
+  }
+  const cliRes = { label: "docker cli", status: "ok", detail: cli };
+  const info = await execa2("docker", ["info"], { reject: false });
+  if (info.exitCode !== 0) {
+    return [
+      cliRes,
+      {
+        label: "docker daemon",
+        status: "warn",
+        detail: "unreachable",
+        hint: "start Docker (Desktop / OrbStack / `systemctl start docker`)"
+      }
+    ];
+  }
+  const daemonRes = { label: "docker daemon", status: "ok", detail: "reachable" };
+  const mod = await import("./dist-SBCQVFCE.js");
+  let imgRes;
+  try {
+    const img = await mod.imageInfo(mod.DEFAULT_BOX_IMAGE);
+    imgRes = img.exists ? { label: "box image", status: "ok", detail: `${mod.DEFAULT_BOX_IMAGE} built` } : {
+      label: "box image",
+      status: "warn",
+      detail: `${mod.DEFAULT_BOX_IMAGE} not built`,
+      hint: "run `agentbox prepare --provider docker` (or let the wizard do it)"
+    };
+  } catch (err) {
+    imgRes = {
+      label: "box image",
+      status: "warn",
+      detail: errSummary(err)
+    };
+  }
+  const volNames = [mod.SHARED_CLAUDE_VOLUME, mod.SHARED_CODEX_VOLUME, mod.SHARED_OPENCODE_VOLUME];
+  const vols = await Promise.all(
+    volNames.map(async (n) => ({ name: n, exists: await mod.volumeExists(n).catch(() => false) }))
+  );
+  const present = vols.filter((v) => v.exists).length;
+  const volRes = {
+    label: "shared volumes",
+    status: "ok",
+    detail: `${String(present)}/${String(vols.length)} present (seeded lazily)`
+  };
+  return [cliRes, daemonRes, imgRes, volRes];
+}
+async function daytonaChecks() {
+  try {
+    const mod = await import("./dist-BD5QJRDC.js");
+    const status = await mod.getDaytonaStatus();
+    if (!status.configured) {
+      return [
+        {
+          label: "credentials",
+          status: "warn",
+          detail: status.reason ?? "not configured",
+          hint: "`agentbox daytona login`"
+        }
+      ];
+    }
+    const credRes = { label: "credentials", status: "ok", detail: "configured" };
+    const snapRes = status.snapshots.length > 0 ? {
+      label: "base snapshot",
+      status: "ok",
+      detail: `${String(status.snapshots.length)} agentbox snapshot(s)`
+    } : {
+      label: "base snapshot",
+      status: "warn",
+      detail: "none",
+      hint: "`agentbox prepare --provider daytona`"
+    };
+    return [credRes, snapRes];
+  } catch (err) {
+    return [
+      {
+        label: "credentials",
+        status: "warn",
+        detail: errSummary(err)
+      }
+    ];
+  }
+}
+async function hetznerChecks() {
+  try {
+    const mod = await import("./dist-BNI5PQYK.js");
+    const cred = mod.readHetznerCredStatus();
+    const credRes = cred.source === "none" ? {
+      label: "credentials",
+      status: "warn",
+      detail: "HCLOUD_TOKEN not set",
+      hint: "`agentbox hetzner login`"
+    } : { label: "credentials", status: "ok", detail: `token from ${cred.source}` };
+    const prepared = mod.readPreparedState();
+    const snapRes = prepared.base?.imageId ? {
+      label: "base snapshot",
+      status: "ok",
+      detail: `image ${String(prepared.base.imageId)} (${prepared.base.cliVersion ?? "\u2014"})`
+    } : {
+      label: "base snapshot",
+      status: "warn",
+      detail: "not baked",
+      hint: "`agentbox prepare --provider hetzner`"
+    };
+    return [credRes, snapRes];
+  } catch (err) {
+    return [
+      {
+        label: "credentials",
+        status: "warn",
+        detail: errSummary(err)
+      }
+    ];
+  }
+}
+async function vercelChecks() {
+  try {
+    const mod = await import("./dist-SJHY3HYN.js");
+    const cred = mod.readVercelCredStatus();
+    const credRes = cred.auth === "none" ? {
+      label: "credentials",
+      status: "warn",
+      detail: "not configured",
+      hint: "`agentbox vercel login`"
+    } : {
+      label: "credentials",
+      status: "ok",
+      detail: `${cred.auth} (${cred.source})`
+    };
+    const prepared = mod.readPreparedState();
+    const snapRes = prepared.base?.snapshotId ? {
+      label: "base snapshot",
+      status: "ok",
+      detail: `${prepared.base.snapshotId.slice(0, 16)}\u2026 (${prepared.base.cliVersion ?? "\u2014"})`
+    } : {
+      label: "base snapshot",
+      status: "warn",
+      detail: "not baked",
+      hint: "`agentbox prepare --provider vercel`"
+    };
+    return [credRes, snapRes];
+  } catch (err) {
+    return [
+      {
+        label: "credentials",
+        status: "warn",
+        detail: errSummary(err)
+      }
+    ];
+  }
+}
+async function runProviderChecks(name) {
+  let results;
+  switch (name) {
+    case "docker":
+      results = await dockerChecks();
+      break;
+    case "daytona":
+      results = await daytonaChecks();
+      break;
+    case "hetzner":
+      results = await hetznerChecks();
+      break;
+    case "vercel":
+      results = await vercelChecks();
+      break;
+  }
+  return { title: name, results };
+}
+async function runAllChecks() {
+  const sys = { title: "system", results: await runSystemChecks() };
+  const providerGroups = await Promise.all(ALL_PROVIDERS.map((n) => runProviderChecks(n)));
+  return [sys, ...providerGroups];
+}
+function worstInResults(results) {
+  let worst = "ok";
+  for (const r of results) {
+    if (r.status === "fail") return "fail";
+    if (r.status === "warn") worst = "warn";
+  }
+  return worst;
+}
+function worstStatus(groups) {
+  let worst = "ok";
+  for (const g of groups) {
+    const w = worstInResults(g.results);
+    if (w === "fail") return "fail";
+    if (w === "warn") worst = "warn";
+  }
+  return worst;
+}
+function summaryToken(group) {
+  const worst = worstInResults(group.results);
+  if (group.title === "system") {
+    if (worst === "fail") return "system FAIL";
+    if (worst === "warn") return "system warn";
+    return "system ok";
+  }
+  if (worst === "fail") return `${group.title} FAIL`;
+  if (worst === "warn") {
+    const cred = group.results.find((r) => r.label === "credentials");
+    if (cred && cred.status === "warn") return `${group.title} login needed`;
+    return `${group.title} not prepared`;
+  }
+  return `${group.title} ready`;
+}
+var C_GREEN = "\x1B[32m";
+var C_YELLOW = "\x1B[33m";
+var C_RED = "\x1B[31m";
+var C_RESET = "\x1B[0m";
+var COLOR = !process.env.NO_COLOR;
+function statusMarker(s) {
+  const glyph = s === "ok" ? "\u2713" : s === "warn" ? "\u26A0" : "\u2717";
+  if (!COLOR) return glyph;
+  const color = s === "ok" ? C_GREEN : s === "warn" ? C_YELLOW : C_RED;
+  return `${color}${glyph}${C_RESET}`;
+}
+function formatCompact(groups) {
+  return groups.map((g) => `${statusMarker(worstInResults(g.results))} ${summaryToken(g)}`).join(" \xB7 ");
+}
+function pad2(s, width) {
+  return s.length >= width ? s : s + " ".repeat(width - s.length);
+}
+function statusBadge(s) {
+  if (s === "ok") return "[ ok ]";
+  if (s === "warn") return "[warn]";
+  return "[FAIL]";
+}
+function formatDetailed(groups) {
+  const lines = [];
+  for (const g of groups) {
+    if (lines.length > 0) lines.push("");
+    lines.push(`${g.title}:`);
+    for (const r of g.results) {
+      const badge = statusBadge(r.status);
+      const tail = r.hint ? `  (${r.hint})` : "";
+      lines.push(`  ${badge} ${pad2(r.label, 18)} ${r.detail}${tail}`);
+    }
+  }
+  return lines;
+}
+
+// src/lib/first-run.ts
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, writeFileSync as writeFileSync3 } from "fs";
+import { homedir as homedir12 } from "os";
+import { dirname, join as join14 } from "path";
+var MARKER_VERSION = 1;
+function setupMarkerPath() {
+  return join14(homedir12(), ".agentbox", "setup-complete.json");
+}
+function isFirstRun() {
+  return !existsSync5(setupMarkerPath());
+}
+function markSetupComplete(provider) {
+  const path = setupMarkerPath();
+  mkdirSync4(dirname(path), { recursive: true });
+  const body = {
+    version: MARKER_VERSION,
+    completedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    provider
+  };
+  writeFileSync3(path, JSON.stringify(body, null, 2) + "\n");
+}
+
+// src/commands/prepare.ts
+import { intro as intro5, log as log29, spinner as spinner7 } from "@clack/prompts";
+import { Command as Command24 } from "commander";
+async function dockerStatus() {
+  let img;
+  try {
+    img = await imageInfo(DEFAULT_BOX_IMAGE);
+  } catch {
+    return { daemon: "unreachable", volumes: [] };
+  }
+  const names = [SHARED_CLAUDE_VOLUME, SHARED_CODEX_VOLUME, SHARED_OPENCODE_VOLUME];
+  const volumes = await Promise.all(
+    names.map(async (name) => ({ name, exists: await volumeExists(name).catch(() => false) }))
+  );
+  return { daemon: "reachable", image: img, volumes };
+}
+function humanBytes(n) {
+  if (n === void 0 || !Number.isFinite(n)) return "\u2014";
+  if (n >= 1024 ** 3) return `${(n / 1024 ** 3).toFixed(2)} GB`;
+  if (n >= 1024 ** 2) return `${(n / 1024 ** 2).toFixed(1)} MB`;
+  if (n >= 1024) return `${(n / 1024).toFixed(1)} KB`;
+  return `${String(n)} B`;
+}
+function humanAge(iso) {
+  if (!iso) return "\u2014";
+  const t = Date.parse(iso);
+  if (!Number.isFinite(t)) return iso;
+  const ageSec = Math.max(0, (Date.now() - t) / 1e3);
+  if (ageSec < 60) return `${ageSec.toFixed(0)}s ago`;
+  if (ageSec < 3600) return `${(ageSec / 60).toFixed(0)}m ago`;
+  if (ageSec < 86400) return `${(ageSec / 3600).toFixed(1)}h ago`;
+  return `${(ageSec / 86400).toFixed(1)}d ago`;
+}
+function pad3(s, width) {
+  return s.length >= width ? s : s + " ".repeat(width - s.length);
+}
+async function renderDocker(status) {
+  const out = ["docker:"];
+  if (status.daemon === "unreachable") {
+    out.push("  docker daemon unreachable (is Docker running?)");
+    return out;
+  }
+  if (!status.image?.exists) {
+    out.push(
+      `  image  ${DEFAULT_BOX_IMAGE}  (not built \u2014 run \`agentbox prepare --provider docker\`)`
+    );
+  } else {
+    out.push(
+      `  image  ${pad3(DEFAULT_BOX_IMAGE, 30)} ${pad3(humanBytes(status.image.sizeBytes), 10)} built ${humanAge(status.image.createdAt)}`
+    );
+  }
+  for (const v of status.volumes) {
+    if (v.exists) {
+      out.push(`  vol    ${pad3(v.name, 30)} present`);
+    } else {
+      out.push(
+        `  vol    ${pad3(v.name, 30)} (none \u2014 seeded lazily on first \`agentbox claude/codex/opencode\`)`
+      );
+    }
+  }
+  return out;
+}
+async function daytonaStatus() {
+  try {
+    const mod = await import("./dist-BD5QJRDC.js");
+    return await mod.getDaytonaStatus();
+  } catch (err) {
+    return {
+      configured: false,
+      reason: err instanceof Error ? err.message.split("\n")[0] : String(err)
+    };
+  }
+}
+function renderDaytona(status, pinnedImage) {
+  const out = ["daytona:"];
+  if (!status.configured) {
+    out.push(
+      `  (not configured \u2014 \`agentbox daytona login\` to set up${status.reason ? `; ${status.reason}` : ""})`
+    );
+    return out;
+  }
+  if (status.reason) out.push(`  warn: ${status.reason}`);
+  if (status.snapshots.length === 0) {
+    out.push("  no agentbox snapshots \u2014 run `agentbox prepare --provider daytona`");
+  } else {
+    for (const s of status.snapshots) {
+      const sizeStr = s.sizeGb !== void 0 ? `${s.sizeGb.toFixed(2)} GB` : "\u2014";
+      const pinned = pinnedImage && pinnedImage === s.name ? "  (pinned in project)" : "";
+      const tail = s.state === "error" && s.errorReason ? `  error: ${s.errorReason.slice(0, 80)}` : `  ${humanAge(s.createdAt)}`;
+      out.push(
+        `  snap   ${pad3(s.name, 40)} ${pad3(s.state ?? "\u2014", 10)} ${pad3(sizeStr, 10)}${tail}${pinned}`
+      );
+    }
+  }
+  if (status.volumes.length === 0) {
+    out.push("  no agentbox volumes \u2014 created lazily on first cloud `agentbox create`");
+  } else {
+    for (const v of status.volumes) {
+      const last = v.lastUsedAt ? `  last used ${humanAge(v.lastUsedAt)}` : "";
+      out.push(`  vol    ${pad3(v.name, 40)} ${pad3(v.state ?? "\u2014", 10)}${last}`);
+    }
+  }
+  return out;
+}
+async function showStatus(opts) {
+  const cfg = await loadEffectiveConfig(process.cwd()).catch(() => null);
+  const pinnedRaw = cfg?.effective.box.image;
+  const pinned = typeof pinnedRaw === "string" && pinnedRaw.length > 0 && pinnedRaw !== DEFAULT_BOX_IMAGE ? pinnedRaw : void 0;
+  const lines = [];
+  const wantDocker = !opts.onlyProvider || opts.onlyProvider === "docker";
+  const wantDaytona = !opts.onlyProvider || opts.onlyProvider === "daytona";
+  if (wantDocker) {
+    const status = await dockerStatus();
+    lines.push(...await renderDocker(status));
+  }
+  if (wantDaytona) {
+    if (lines.length > 0) lines.push("");
+    const status = await daytonaStatus();
+    lines.push(...renderDaytona(status, pinned));
+  }
+  if (pinned) {
+    lines.push("");
+    lines.push(`project pin:  box.image = ${pinned}`);
+  }
+  process.stdout.write(lines.join("\n") + "\n");
+}
+async function runPrepare(providerName, opts = {}) {
+  if (!isKnownProvider(providerName)) {
+    process.stderr.write("error: --provider must be one of: docker, daytona, hetzner, vercel\n");
+    process.exit(1);
+  }
+  if (providerName === "daytona" && !opts.yes && process.stdin.isTTY) {
+    process.stdout.write(
+      "This will trigger a Daytona image build (~7 min cold, ~seconds with cache) and register a named snapshot in your org.\nRe-run with --yes to skip this notice.\n"
+    );
+  }
+  const provider = await getProvider(providerName);
+  if (typeof provider.prepare !== "function") {
+    log29.error(`provider '${providerName}' does not implement prepare`);
+    process.exit(1);
+  }
+  const cwd = opts.cwd ?? process.cwd();
+  const registry = providerName === "docker" ? await loadEffectiveConfig(cwd).then((c) => c.effective.box.imageRegistry).catch(() => void 0) : void 0;
+  const sp = spinner7();
+  sp.start(`preparing ${providerName}\u2026`);
+  try {
+    const result = await provider.prepare({
+      name: opts.name,
+      hostWorkspace: cwd,
+      force: opts.force,
+      allowPull: opts.build ? false : void 0,
+      registry,
+      onLog: (line) => sp.message(line.slice(0, 80))
+    });
+    if (result.snapshotName !== void 0) {
+      sp.stop(`prepared ${providerName}: snapshot '${result.snapshotName}'`);
+      try {
+        const written = await setConfigValue("project", "box.image", result.snapshotName, cwd);
+        log29.success(`box.image = ${result.snapshotName} (written to ${written.path})`);
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        log29.warn(
+          `prepared snapshot '${result.snapshotName}', but failed to pin it into the project config: ${msg}
+Run \`agentbox config set --project box.image ${result.snapshotName}\` manually.`
+        );
+      }
+    } else {
+      sp.stop(`${providerName.slice(0, 1).toUpperCase() + providerName.slice(1)} provider ready`);
+    }
+    if (!opts.suppressStatus) {
+      process.stdout.write("\n");
+      await showStatus({ onlyProvider: providerName });
+    }
+    if (!opts.suppressTip) {
+      log29.info(
+        "tip: install the agentbox host skill so Claude Code on this machine can drive AgentBox for you:\n  npx skills add https://github.com/madarco/agentbox --skill agentbox"
+      );
+    }
+  } catch (err) {
+    sp.stop(`prepare failed: ${describeError(err)}`);
+    throw err;
+  }
+}
+var prepareCommand = new Command24("prepare").description(
+  "Build base sandbox images / snapshots, or show what is already prepared across providers."
+).option(
+  "-p, --provider <name>",
+  "provider to prepare (docker | daytona | hetzner | vercel). Omit for status-only."
+).option("-n, --name <name>", "snapshot name (Daytona only; default: agentbox-base-<timestamp>)").option("-f, --force", "rebuild even if the image / snapshot already exists").option(
+  "--build",
+  "docker: build the base image locally instead of pulling the prebuilt one from the registry"
+).option("-y, --yes", "skip confirmation prompts (cost / time warnings)").option("--status", "show status without preparing anything").action(async (opts) => {
+  if (!opts.provider || opts.status) {
+    await showStatus({});
+    return;
+  }
+  const providerName = opts.provider.trim();
+  intro5(`preparing ${providerName} base image`);
+  await runPrepare(providerName, {
+    name: opts.name,
+    force: opts.force,
+    build: opts.build,
+    yes: opts.yes
+  });
+});
+function describeError(err) {
+  if (!(err instanceof Error)) return String(err);
+  const parts = [err.message];
+  let cause = err.cause;
+  for (let i = 0; i < 5 && cause; i++) {
+    if (cause instanceof Error) {
+      parts.push(`caused by: ${cause.message}`);
+      const code = cause.code;
+      if (typeof code === "string") parts.push(`(${code})`);
+      cause = cause.cause;
+    } else if (typeof cause === "object") {
+      parts.push(`caused by: ${JSON.stringify(cause)}`);
+      break;
+    } else {
+      parts.push(`caused by: ${String(cause)}`);
+      break;
+    }
+  }
+  return parts.join(" \u2014 ");
+}
+
+// src/commands/install.ts
+var MANAGED_SENTINEL = "<!-- agentbox-managed:v1 -->";
+var LOGO_L1 = "\u2584\u2580\u2588 \u2588\u2580\u2580 \u2588\u2580\u2580 \u2588\u2584\u2591\u2588 \u2580\u2588\u2580 \u2588\u2584\u2584 \u2588\u2580\u2588 \u2580\u2584\u2580";
+var LOGO_L2 = "\u2588\u2580\u2588 \u2588\u2584\u2588 \u2588\u2588\u2584 \u2588\u2591\u2580\u2588 \u2591\u2588\u2591 \u2588\u2584\u2588 \u2588\u2584\u2588 \u2588\u2591\u2588";
+var LOGO_WIDTH = LOGO_L1.length;
+var BANNER = (() => {
+  const art = `${LOGO_L1}
+${LOGO_L2}`;
+  const tinted = process.env.NO_COLOR ? art : `\x1B[38;5;39m${art}\x1B[0m`;
+  return `
+${tinted}
+
+`;
+})();
+var SYNC_BEGIN2 = "\x1B[?2026h";
+var SYNC_END2 = "\x1B[?2026l";
+var HIDE_CURSOR = "\x1B[?25l";
+var SHOW_CURSOR = "\x1B[?25h";
+var SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+var sleep3 = (ms) => new Promise((r) => setTimeout(r, ms));
+function shineColor(dist) {
+  const d = Math.abs(dist);
+  if (d === 0) return 231;
+  if (d === 1) return 159;
+  if (d === 2) return 81;
+  return 39;
+}
+function paintLine(line, center) {
+  let out = "";
+  let prev = -1;
+  for (let i = 0; i < line.length; i++) {
+    const ch = line[i];
+    const c = shineColor(i - center);
+    if (c !== prev) {
+      out += `\x1B[38;5;${String(c)}m`;
+      prev = c;
+    }
+    out += ch;
+  }
+  return out + "\x1B[0m";
+}
+async function animateBanner() {
+  if (process.env.NO_COLOR || process.env.CI || process.env.AGENTBOX_NO_ANIM || !process.stdout.isTTY) {
+    process.stdout.write(BANNER);
+    return;
+  }
+  const restoreCursor = () => {
+    process.stdout.write(SHOW_CURSOR);
+  };
+  process.once("exit", restoreCursor);
+  const onSigint = () => {
+    restoreCursor();
+    process.exit(130);
+  };
+  process.once("SIGINT", onSigint);
+  const frameMs = 45;
+  const start = -3;
+  const end = LOGO_WIDTH + 2;
+  const down = 4;
+  process.stdout.write(`
+${HIDE_CURSOR}`);
+  process.stdout.write("\n".repeat(down) + `\x1B[${String(down)}A`);
+  const statusLine2 = (spin) => `  \x1B[38;5;51m${spin}\x1B[0m \x1B[38;5;245mChecking system\u2026\x1B[0m`;
+  for (let center = start; center <= end; center++) {
+    const spin = SPIN[Math.floor((center - start) / 2) % SPIN.length] ?? SPIN[0];
+    const frame = SYNC_BEGIN2 + paintLine(LOGO_L1, center) + "\n" + paintLine(LOGO_L2, center) + "\n\n\x1B[2K" + // down to the status row (col 0), clear it
+    statusLine2(spin) + "\x1B[3A\r" + // back up to the logo's first row
+    SYNC_END2;
+    process.stdout.write(frame);
+    await sleep3(frameMs);
+  }
+  process.stdout.write(SYNC_BEGIN2 + `\x1B[38;5;39m${LOGO_L1}
+${LOGO_L2}\x1B[0m` + SYNC_END2);
+  await sleep3(250);
+  process.stdout.write(SYNC_BEGIN2 + "\n\x1B[2K\n\x1B[2K" + SHOW_CURSOR + SYNC_END2);
+  process.removeListener("exit", restoreCursor);
+  process.removeListener("SIGINT", onSigint);
+}
+var LEGACY_INFO_MARKER = "Drive AgentBox from the host:";
+function installTargets() {
+  const home = homedir13();
+  const claudeSkills = join15(home, ".claude", "skills");
+  return [
+    { src: join15("agentbox", "SKILL.md"), dest: join15(claudeSkills, "agentbox", "SKILL.md") },
+    {
+      src: join15("agentbox-info", "SKILL.md"),
+      dest: join15(claudeSkills, "agentbox-info", "SKILL.md")
+    },
+    {
+      src: join15("codex", "agentbox.md"),
+      dest: join15(home, ".codex", "prompts", "agentbox.md"),
+      gateDir: join15(home, ".codex")
+    },
+    {
+      src: join15("opencode", "agentbox.md"),
+      dest: join15(home, ".config", "opencode", "commands", "agentbox.md"),
+      gateDir: join15(home, ".config", "opencode")
+    }
+  ];
+}
+function resolveHostSkillsDir() {
+  const here = dirname2(fileURLToPath(import.meta.url));
+  const candidates = [
+    resolve2(here, "..", "share", "host-skills"),
+    resolve2(here, "..", "..", "share", "host-skills")
+  ];
+  for (const c of candidates) {
+    if (existsSync6(c)) return c;
+  }
+  throw new Error(`could not locate bundled host skills; tried:
+  ${candidates.join("\n  ")}`);
+}
+function writableReason(target, force) {
+  if (!existsSync6(target)) return "new";
+  const existing = readFileSync(target, "utf8");
+  if (existing.includes(MANAGED_SENTINEL) || existing.includes(LEGACY_INFO_MARKER)) {
+    return "managed";
+  }
+  return force ? "forced" : "skip";
+}
+function installHostSkills(opts = {}) {
+  const force = opts.force === true;
+  const dryRun = opts.dryRun === true;
+  const quiet = opts.quiet === true;
+  const srcDir = resolveHostSkillsDir();
+  const written = [];
+  const blocked = [];
+  let skipped = 0;
   for (const t of installTargets()) {
-    const src = join11(srcDir, t.src);
-    if (!existsSync5(src)) {
-      log29.warn(`bundled file missing (skipped): ${src}`);
+    const src = join15(srcDir, t.src);
+    if (!existsSync6(src)) {
+      if (!quiet) log30.warn(`bundled file missing (skipped): ${src}`);
       skipped++;
       continue;
     }
-    if (t.gateDir && !existsSync5(t.gateDir)) continue;
+    if (t.gateDir && !existsSync6(t.gateDir)) continue;
     const reason = writableReason(t.dest, force);
     if (reason === "skip") {
-      log29.warn(`user-modified file at ${t.dest}, skipping; pass --force to overwrite`);
+      if (!quiet) log30.warn(`user-modified file at ${t.dest}, skipping; pass --force to overwrite`);
+      blocked.push(t.dest);
       skipped++;
       continue;
     }
     if (dryRun) {
-      log29.info(`would write ${t.dest} (${reason})`);
+      if (!quiet) log30.info(`would write ${t.dest} (${reason})`);
       written.push(t.dest);
       continue;
     }
-    mkdirSync3(dirname(t.dest), { recursive: true });
-    writeFileSync3(t.dest, readFileSync(src, "utf8"));
+    mkdirSync5(dirname2(t.dest), { recursive: true });
+    writeFileSync4(t.dest, readFileSync(src, "utf8"));
     written.push(t.dest);
   }
-  if (dryRun) {
-    outro6(`dry-run: ${String(written.length)} file(s) would be written, ${String(skipped)} skipped`);
-    return;
+  return { written, skipped, blocked };
+}
+var PROVIDER_HINTS = {
+  docker: "builds a ~1GB local image; no login needed",
+  hetzner: "paste an API token from the Hetzner Console",
+  daytona: "approve a browser sign-in link",
+  vercel: "installs the Vercel sandbox CLI, then a browser sign-in"
+};
+var PROVIDER_LABEL = {
+  docker: "Docker (local)",
+  hetzner: "Hetzner (cloud VPS)",
+  daytona: "Daytona (cloud sandbox)",
+  vercel: "Vercel (cloud microVM)"
+};
+function ensureTty() {
+  if (process.stdin.isTTY && process.stdout.isTTY) return true;
+  process.stderr.write(
+    "agentbox install: an interactive terminal is required. Run `agentbox <provider> login` and `agentbox prepare --provider <name>` instead.\n"
+  );
+  return false;
+}
+async function runProviderLogin(name) {
+  if (name === "docker") return true;
+  if (name === "daytona") {
+    const mod2 = await import("./dist-BD5QJRDC.js");
+    const status2 = await mod2.getDaytonaStatus();
+    if (status2.configured) {
+      log30.info("daytona: already configured");
+      const rotate = await confirm14({ message: "Re-authenticate Daytona?", initialValue: false });
+      if (isCancel15(rotate)) return false;
+      if (rotate) await mod2.ensureDaytonaCredentials({ force: true });
+      return true;
+    }
+    await mod2.ensureDaytonaCredentials();
+    return true;
+  }
+  if (name === "hetzner") {
+    const mod2 = await import("./dist-BNI5PQYK.js");
+    const status2 = mod2.readHetznerCredStatus();
+    if (status2.source !== "none") {
+      log30.info("hetzner: already configured");
+      const rotate = await confirm14({ message: "Re-authenticate Hetzner?", initialValue: false });
+      if (isCancel15(rotate)) return false;
+      if (rotate) await mod2.ensureHetznerCredentials({ force: true });
+      return true;
+    }
+    await mod2.ensureHetznerCredentials();
+    return true;
+  }
+  const mod = await import("./dist-SJHY3HYN.js");
+  const status = mod.readVercelCredStatus();
+  if (status.auth !== "none") {
+    log30.info(`vercel: already configured (${status.auth})`);
+    const rotate = await confirm14({ message: "Re-authenticate Vercel?", initialValue: false });
+    if (isCancel15(rotate)) return false;
+    if (rotate) await mod.ensureVercelCredentials({ force: true });
+    return true;
+  }
+  await mod.ensureVercelCredentials();
+  return true;
+}
+function tutorialBody(provider) {
+  const startCmd = provider === "docker" ? "agentbox claude" : `agentbox ${provider} claude`;
+  return `Get started:
+  ${startCmd}                       # for claude, codex, opencode
+   -> Setup wizard? -> Yes          # install dependencies and setup agentbox.yaml
+   -> Ctrl+a d                      # to detach from the box and leave claude running
+  agentbox claude attach 1          # resume it later
+  agentbox install                  # to set up another provider`;
+}
+var KNOWN_PROVIDERS = ["docker", "hetzner", "daytona", "vercel"];
+function isProviderName(s) {
+  return KNOWN_PROVIDERS.includes(s);
+}
+async function runInstallWizard(opts = {}) {
+  if (!ensureTty()) return false;
+  await animateBanner();
+  intro6("Check system compatibility");
+  const sysResults = await runSystemChecks();
+  const sysGroup = { title: "system", results: sysResults };
+  process.stdout.write("  " + formatCompact([sysGroup]) + "\n");
+  const hardFail = sysResults.find((r) => r.status === "fail");
+  if (hardFail) {
+    log30.error(`system check failed: ${hardFail.label} \u2014 ${hardFail.detail}`);
+    log30.info("run `agentbox doctor` for full detail");
+    const cont = await confirm14({ message: "Continue anyway?", initialValue: false });
+    if (isCancel15(cont) || !cont) {
+      outro6("aborted");
+      return false;
+    }
+  }
+  let providerName;
+  if (opts.provider) {
+    const candidate = opts.provider.trim();
+    if (!isProviderName(candidate)) {
+      log30.error(`unknown --provider: ${candidate}`);
+      return false;
+    }
+    providerName = candidate;
+  } else {
+    const picked = await select2({
+      message: "Which provider do you want to set up?",
+      initialValue: "docker",
+      options: KNOWN_PROVIDERS.map((p) => ({
+        value: p,
+        label: PROVIDER_LABEL[p],
+        hint: PROVIDER_HINTS[p]
+      }))
+    });
+    if (isCancel15(picked)) {
+      outro6("cancelled");
+      return false;
+    }
+    providerName = picked;
   }
-  if (written.length === 0) {
-    outro6(`nothing installed (${String(skipped)} skipped)`);
+  if (providerName !== "docker") {
+    const loggedIn = await runProviderLogin(providerName);
+    if (!loggedIn) {
+      outro6("cancelled");
+      return false;
+    }
+  }
+  const prepareMsg = providerName === "docker" ? "Build the box image now? (~1GB, a few minutes)" : `Bake the ${providerName} base snapshot now? (a few minutes, uses cloud time)`;
+  const wantPrepare = opts.yes ? true : await confirm14({ message: prepareMsg, initialValue: true });
+  if (isCancel15(wantPrepare)) {
+    outro6("cancelled");
+    return false;
+  }
+  if (wantPrepare) {
+    try {
+      await runPrepare(providerName, {
+        cwd: process.cwd(),
+        yes: true,
+        suppressStatus: true,
+        suppressTip: true
+      });
+    } catch (err) {
+      log30.warn(
+        `prepare failed: ${err instanceof Error ? err.message : String(err)} \u2014 you can rerun \`agentbox prepare --provider ${providerName}\` later`
+      );
+    }
+  } else {
+    log30.info(
+      `skipped \u2014 the ${providerName} base will build lazily on first \`agentbox ${providerName === "docker" ? "" : providerName + " "}create\``
+    );
+  }
+  const sp = spinner8();
+  sp.start("installing host /agentbox skill\u2026");
+  let skillRes;
+  try {
+    skillRes = installHostSkills({ force: opts.force, dryRun: opts.dryRun, quiet: true });
+    if (skillRes.written.length > 0) {
+      sp.stop(`Agentbox Skills: Installed in ${String(skillRes.written.length)} locations`);
+    } else {
+      sp.stop(`Agentbox Skills: nothing to write (${String(skillRes.skipped)} skipped)`);
+    }
+    if (skillRes.blocked.length > 0) {
+      log30.warn(
+        `user-modified host skill file(s) left in place: ${skillRes.blocked.join(", ")}
+pass \`agentbox install --skills-only --force\` to overwrite`
+      );
+    }
+  } catch (err) {
+    sp.stop("Agentbox Skills: failed");
+    log30.warn(err instanceof Error ? err.message : String(err));
+  }
+  markSetupComplete(providerName);
+  const providerGroup = await runProviderChecks(providerName);
+  process.stdout.write("  " + formatCompact([sysGroup, providerGroup]) + "\n");
+  note(tutorialBody(providerName), "Next steps");
+  outro6(
+    opts.fromAutoTrigger ? "\u2728 Setup complete \u2014 continuing with your command\u2026" : "\u2728 Setup complete"
+  );
+  return true;
+}
+var installCommand = new Command25("install").description(
+  "Interactive setup wizard: system check, pick a provider, log in, prepare its base image/snapshot, and install the host /agentbox skill. `--skills-only` runs just the skill install."
+).option(
+  "--skills-only",
+  "only install the host /agentbox skill files (no wizard, no login, no prepare)"
+).option("--force", "overwrite existing skill files even if not AgentBox-managed").option("--dry-run", "print what would be written without changing anything").option(
+  "-p, --provider <name>",
+  "pre-select the provider to set up (docker | daytona | hetzner | vercel)"
+).option("-y, --yes", "auto-confirm the prepare step").action(async (opts) => {
+  if (opts.skillsOnly) {
+    intro6("Installing AgentBox host commands...");
+    let res;
+    try {
+      res = installHostSkills({ force: opts.force, dryRun: opts.dryRun });
+    } catch (err) {
+      log30.error(err instanceof Error ? err.message : String(err));
+      process.exit(1);
+    }
+    if (opts.dryRun) {
+      outro6(
+        `dry-run: ${String(res.written.length)} file(s) would be written, ${String(res.skipped)} skipped`
+      );
+      return;
+    }
+    if (res.written.length === 0) {
+      outro6(`nothing installed (${String(res.skipped)} skipped)`);
+      return;
+    }
+    outro6(`installed: ${res.written.join(", ")}`);
     return;
   }
-  outro6(`installed: ${written.join(", ")}`);
+  const ok = await runInstallWizard({
+    provider: opts.provider,
+    yes: opts.yes,
+    force: opts.force,
+    dryRun: opts.dryRun
+  });
+  if (!ok) process.exit(1);
+});
+
+// src/commands/doctor.ts
+import { Command as Command26 } from "commander";
+var doctorCommand = new Command26("doctor").description(
+  "Diagnose system compatibility and provider readiness (Node, git, ssh, Docker daemon, provider credentials, prepared snapshots)."
+).option(
+  "-p, --provider <name>",
+  "limit checks to one provider (docker | daytona | hetzner | vercel)"
+).action(async (opts) => {
+  let groups;
+  if (opts.provider) {
+    const name = opts.provider.trim();
+    if (!isKnownProvider(name)) {
+      process.stderr.write(
+        "error: --provider must be one of: docker, daytona, hetzner, vercel\n"
+      );
+      process.exit(1);
+    }
+    groups = [
+      { title: "system", results: await runSystemChecks() },
+      await runProviderChecks(name)
+    ];
+  } else {
+    groups = await runAllChecks();
+  }
+  process.stdout.write(formatDetailed(groups).join("\n") + "\n");
+  const worst = worstStatus(groups);
+  if (worst === "fail") {
+    process.stdout.write(
+      "\nOne or more required checks failed. Fix the FAIL items above before continuing.\n"
+    );
+    process.exit(1);
+  }
+  if (worst === "warn") {
+    process.stdout.write(
+      "\nWarnings are providers that need setup. Run `agentbox install` to configure one,\nor `agentbox prepare --status` to see remote snapshot inventory.\n"
+    );
+  } else {
+    process.stdout.write("\nAll checks passed.\n");
+  }
 });
 
 // src/commands/git.ts
-import { Command as Command25 } from "commander";
+import { Command as Command27 } from "commander";
 var WORKSPACE = "/workspace";
 var TOKEN_TTL_MS = 12e4;
-async function runInBox(box, argv) {
+async function runInBox(box, argv2) {
   const provider = await providerForBox(box);
-  return provider.exec(box, argv, { cwd: WORKSPACE });
+  return provider.exec(box, argv2, { cwd: WORKSPACE });
 }
-async function runAndStream(box, argv) {
-  const r = await runInBox(box, argv);
+async function runAndStream(box, argv2) {
+  const r = await runInBox(box, argv2);
   if (r.stdout) process.stdout.write(r.stdout);
   if (r.stderr) process.stderr.write(r.stderr);
   return r.exitCode;
@@ -8298,33 +9671,33 @@ function buildPredictedGhPrParams(ghArgs) {
 async function exitWith(code) {
   process.exit(code);
 }
-var pushCommand = new Command25("push").description("Push the box's branch via the host relay (host creds, no prompt)").argument("<box>", "box ref: project index, id, id prefix, name, or container").argument("[args...]", "extra flags forwarded to `agentbox-ctl git push` (e.g. --force-with-lease, --tags)").option("--remote <name>", "remote name (default: origin)").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args, opts) => {
+var pushCommand = new Command27("push").description("Push the box's branch via the host relay (host creds, no prompt)").argument("<box>", "box ref: project index, id, id prefix, name, or container").argument("[args...]", "extra flags forwarded to `agentbox-ctl git push` (e.g. --force-with-lease, --tags)").option("--remote <name>", "remote name (default: origin)").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args, opts) => {
   try {
     const box = await resolveBoxOrExit(boxRef);
     const predicted = buildPredictedGitParams(opts.remote, args);
     const tokenArgs = await hostInitiatedArgs(box.id, "git.push", predicted);
-    const argv = ["agentbox-ctl", "git", "push", ...tokenArgs];
-    if (opts.remote) argv.push("--remote", opts.remote);
-    argv.push(...args);
-    await exitWith(await runAndStream(box, argv));
+    const argv2 = ["agentbox-ctl", "git", "push", ...tokenArgs];
+    if (opts.remote) argv2.push("--remote", opts.remote);
+    argv2.push(...args);
+    await exitWith(await runAndStream(box, argv2));
   } catch (err) {
     handleLifecycleError(err);
   }
 });
-var fetchCommand = new Command25("fetch").description("Fetch via the host relay (refs land in the shared .git)").argument("<box>", "box ref").argument("[args...]", "extra flags forwarded to `agentbox-ctl git fetch` (e.g. --prune)").option("--remote <name>", "remote name (default: origin)").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args, opts) => {
+var fetchCommand = new Command27("fetch").description("Fetch via the host relay (refs land in the shared .git)").argument("<box>", "box ref").argument("[args...]", "extra flags forwarded to `agentbox-ctl git fetch` (e.g. --prune)").option("--remote <name>", "remote name (default: origin)").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args, opts) => {
   try {
     const box = await resolveBoxOrExit(boxRef);
     const predicted = buildPredictedGitParams(opts.remote, args);
     const tokenArgs = await hostInitiatedArgs(box.id, "git.fetch", predicted);
-    const argv = ["agentbox-ctl", "git", "fetch", ...tokenArgs];
-    if (opts.remote) argv.push("--remote", opts.remote);
-    argv.push(...args);
-    await exitWith(await runAndStream(box, argv));
+    const argv2 = ["agentbox-ctl", "git", "fetch", ...tokenArgs];
+    if (opts.remote) argv2.push("--remote", opts.remote);
+    argv2.push(...args);
+    await exitWith(await runAndStream(box, argv2));
   } catch (err) {
     handleLifecycleError(err);
   }
 });
-var pullCommand = new Command25("pull").description(
+var pullCommand = new Command27("pull").description(
   "Fetch via the relay then merge in /workspace. With <branch>: first `git checkout <branch>` so the box switches base branch and pulls latest \u2014 useful for reusing a box on a new task."
 ).argument("<box>", "box ref").argument("[branch]", "optional branch to switch to before pulling (e.g. main)").argument("[args...]", "extra flags forwarded to `agentbox-ctl git pull`").option("--remote <name>", "remote name (default: origin)").option("--ff-only", "pass --ff-only to the in-box merge").allowExcessArguments(true).allowUnknownOption(true).action(
   async (boxRef, branch, args, opts) => {
@@ -8336,17 +9709,17 @@ var pullCommand = new Command25("pull").description(
       }
       const predicted = buildPredictedGitParams(opts.remote, args);
       const tokenArgs = await hostInitiatedArgs(box.id, "git.fetch", predicted);
-      const argv = ["agentbox-ctl", "git", "pull", ...tokenArgs];
-      if (opts.remote) argv.push("--remote", opts.remote);
-      if (opts.ffOnly) argv.push("--ff-only");
-      argv.push(...args);
-      await exitWith(await runAndStream(box, argv));
+      const argv2 = ["agentbox-ctl", "git", "pull", ...tokenArgs];
+      if (opts.remote) argv2.push("--remote", opts.remote);
+      if (opts.ffOnly) argv2.push("--ff-only");
+      argv2.push(...args);
+      await exitWith(await runAndStream(box, argv2));
     } catch (err) {
       handleLifecycleError(err);
     }
   }
 );
-var checkoutCommand = new Command25("checkout").description("Change the box's working branch (runs `git checkout <branch>` in /workspace)").argument("<box>", "box ref").argument("<branch>", "branch to check out inside the box").argument("[args...]", "extra flags forwarded to `git checkout`").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, branch, args) => {
+var checkoutCommand = new Command27("checkout").description("Change the box's working branch (runs `git checkout <branch>` in /workspace)").argument("<box>", "box ref").argument("<branch>", "branch to check out inside the box").argument("[args...]", "extra flags forwarded to `git checkout`").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, branch, args) => {
   try {
     const box = await resolveBoxOrExit(boxRef);
     await exitWith(await runAndStream(box, ["git", "checkout", branch, ...args]));
@@ -8354,7 +9727,7 @@ var checkoutCommand = new Command25("checkout").description("Change the box's wo
     handleLifecycleError(err);
   }
 });
-var statusCommand = new Command25("status").description("Run `git status` in the box's /workspace (read-only, no relay)").argument("<box>", "box ref").argument("[args...]", "extra flags forwarded to `git status`").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args) => {
+var statusCommand = new Command27("status").description("Run `git status` in the box's /workspace (read-only, no relay)").argument("<box>", "box ref").argument("[args...]", "extra flags forwarded to `git status`").allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args) => {
   try {
     const box = await resolveBoxOrExit(boxRef);
     await exitWith(await runAndStream(box, ["git", "status", ...args]));
@@ -8378,7 +9751,7 @@ function injectPrCreateHead2(op, box, args) {
   return injectPrCreateHead(op, rootWt?.branch, args);
 }
 function buildPrSubcommand(op) {
-  return new Command25(op).description(PR_OP_DESCRIPTIONS[op]).argument("<box>", "box ref").argument(
+  return new Command27(op).description(PR_OP_DESCRIPTIONS[op]).argument("<box>", "box ref").argument(
     "[args...]",
     "extra flags forwarded to `gh pr <op>` (e.g. --title, --body, --label, --draft, --json)"
   ).allowExcessArguments(true).allowUnknownOption(true).action(async (boxRef, args) => {
@@ -8387,25 +9760,25 @@ function buildPrSubcommand(op) {
       const ghArgs = injectPrCreateHead2(op, box, args);
       const predicted = buildPredictedGhPrParams(ghArgs);
       const tokenArgs = await hostInitiatedArgs(box.id, `gh.pr.${op}`, predicted);
-      const argv = ["agentbox-ctl", "gh", "pr", op, ...tokenArgs, ...ghArgs];
-      await exitWith(await runAndStream(box, argv));
+      const argv2 = ["agentbox-ctl", "gh", "pr", op, ...tokenArgs, ...ghArgs];
+      await exitWith(await runAndStream(box, argv2));
     } catch (err) {
       handleLifecycleError(err);
     }
   });
 }
-var prCommand = new Command25("pr").description(
+var prCommand = new Command27("pr").description(
   "PR operations against a box's branch via the host `gh` CLI"
 );
 for (const op of GH_PR_OPS) {
   const sub = buildPrSubcommand(op);
   prCommand.addCommand(sub, op === "create" ? { isDefault: true } : void 0);
 }
-var gitCommand = new Command25("git").description("Run git / gh pr operations against a box from the host").addCommand(pushCommand).addCommand(fetchCommand).addCommand(pullCommand).addCommand(checkoutCommand).addCommand(statusCommand).addCommand(prCommand);
+var gitCommand = new Command27("git").description("Run git / gh pr operations against a box from the host").addCommand(pushCommand).addCommand(fetchCommand).addCommand(pullCommand).addCommand(checkoutCommand).addCommand(statusCommand).addCommand(prCommand);
 
 // src/commands/list.ts
-import { log as log30 } from "@clack/prompts";
-import { Command as Command26 } from "commander";
+import { log as log31 } from "@clack/prompts";
+import { Command as Command28 } from "commander";
 import { pathToFileURL } from "url";
 
 // src/hyperlink.ts
@@ -8418,6 +9791,38 @@ function hyperlink(label, url, stream) {
   return `${ESC2}]8;;${url}${ST}${label}${ESC2}]8;;${ST}`;
 }
 
+// src/lib/cloud-state.ts
+var PROBE_TIMEOUT_MS = 4e3;
+async function applyLiveCloudStates(boxes) {
+  await Promise.all(
+    boxes.map(async (b) => {
+      if (!b.provider || b.provider === "docker") return;
+      try {
+        const provider = await providerForBox(b);
+        const state = await withTimeout(provider.probeState(b), PROBE_TIMEOUT_MS);
+        if (state !== null) b.state = state;
+      } catch {
+      }
+    })
+  );
+}
+function withTimeout(p, ms) {
+  return new Promise((resolve3) => {
+    const t = setTimeout(() => resolve3(null), ms);
+    if (typeof t.unref === "function") t.unref();
+    p.then(
+      (v) => {
+        clearTimeout(t);
+        resolve3(v);
+      },
+      () => {
+        clearTimeout(t);
+        resolve3(null);
+      }
+    );
+  });
+}
+
 // src/watch.ts
 function withWatchOptions(cmd) {
   return cmd.option("-w, --watch", "redraw continuously until interrupted (Ctrl-C)").option("--interval <seconds>", "refresh interval for --watch", "2");
@@ -8433,7 +9838,7 @@ async function watchRender(produce, rawInterval) {
   process.stdout.write("\x1B[?25l");
   process.once("exit", () => process.stdout.write("\x1B[?25h"));
   process.once("SIGINT", () => process.exit(0));
-  const sleep4 = (d) => new Promise((r) => setTimeout(r, d));
+  const sleep5 = (d) => new Promise((r) => setTimeout(r, d));
   for (; ; ) {
     let body;
     try {
@@ -8449,7 +9854,7 @@ async function watchRender(produce, rawInterval) {
 ${body.replace(/\n+$/, "")}
 `
     );
-    await sleep4(ms);
+    await sleep5(ms);
   }
 }
 
@@ -8501,6 +9906,7 @@ function workspaceCell(path, target, stream) {
   return { text: hyperlink(display, url, stream), width: display.length };
 }
 function agentSummary(b) {
+  if (b.state !== "running") return "-";
   const agents = [];
   if (b.claudeActivity && b.claudeActivity !== "unknown") {
     agents.push(`claude:${b.claudeActivity}`);
@@ -8554,14 +9960,19 @@ function renderTable(boxes, stream) {
     (row2) => row2.map((cell, i) => padCell(cell ?? plain(""), i)).join("  ").trimEnd()
   ).join("\n");
 }
-async function scopedBoxes(all) {
+async function scopedBoxes(all, live) {
   const boxes = await listBoxes();
-  if (all) return { boxes, projectRoot: "", scoped: false };
+  if (all) {
+    if (live) await applyLiveCloudStates(boxes);
+    return { boxes, projectRoot: "", scoped: false };
+  }
   const { root } = await findProjectRoot(process.cwd());
-  return { boxes: boxes.filter((b) => b.projectRoot === root), projectRoot: root, scoped: true };
+  const scoped2 = boxes.filter((b) => b.projectRoot === root);
+  if (live) await applyLiveCloudStates(scoped2);
+  return { boxes: scoped2, projectRoot: root, scoped: true };
 }
-async function buildListText(all) {
-  const { boxes, projectRoot, scoped: scoped2 } = await scopedBoxes(all);
+async function buildListText(all, live) {
+  const { boxes, projectRoot, scoped: scoped2 } = await scopedBoxes(all, live);
   if (boxes.length === 0) {
     if (scoped2) {
       return `no boxes in this project (${projectRoot}) \u2014 run \`agentbox create\`, or \`agentbox list --global\` to see all`;
@@ -8575,31 +9986,35 @@ async function buildListText(all) {
 ${table}`;
 }
 var listCommand2 = withWatchOptions(
-  new Command26("list").alias("ls").description("List agent boxes in the current project (-g for all)").option("-j, --json", "machine-readable JSON output").option("-g, --global", "include boxes from all projects")
+  new Command28("list").alias("ls").description("List agent boxes in the current project (-g for all)").option("-j, --json", "machine-readable JSON output").option("-g, --global", "include boxes from all projects").option(
+    "--live",
+    "probe live cloud state via the provider SDK (slower; default: last host-known state)"
+  )
 ).action(async (opts) => {
   if (opts.json && opts.watch) {
-    log30.error("cannot combine --json with --watch");
+    log31.error("cannot combine --json with --watch");
     process.exit(2);
   }
   const all = opts.global ?? false;
+  const live = opts.live ?? false;
   if (opts.watch) {
-    await watchRender(() => buildListText(all), opts.interval);
+    await watchRender(() => buildListText(all, live), opts.interval);
     return;
   }
   if (opts.json) {
-    const { boxes } = await scopedBoxes(all);
+    const { boxes } = await scopedBoxes(all, live);
     process.stdout.write(JSON.stringify(boxes, null, 2) + "\n");
     return;
   }
-  process.stdout.write(await buildListText(all) + "\n");
+  process.stdout.write(await buildListText(all, live) + "\n");
 });
 
 // src/commands/logs.ts
-import { log as log31 } from "@clack/prompts";
-import { Command as Command27 } from "commander";
+import { log as log32 } from "@clack/prompts";
+import { Command as Command29 } from "commander";
 import { spawn as spawn3 } from "child_process";
 var DAEMON_LOG_PATH = "/var/log/agentbox/ctl-daemon.log";
-var logsCommand = new Command27("logs").description("Print recent log lines from a box service; -f to stream").argument(
+var logsCommand = new Command29("logs").description("Print recent log lines from a box service; -f to stream").argument(
   "[box]",
   "box ref (optional when cwd has exactly 1 box): project index, id, id prefix, name, or container"
 ).argument("[service]", "service name from agentbox.yaml").option("-n, --tail <n>", "how many recent lines to print first", "200").option("-f, --follow", "keep the connection open and stream new lines").option(
@@ -8617,9 +10032,9 @@ var logsCommand = new Command27("logs").description("Print recent log lines from
       service = boxArg;
     }
     if (!service && !opts.daemon) {
-      log31.error("missing <service> argument");
-      log31.info("usage: agentbox logs [box] <service> [-n N] [-f]");
-      log31.info("       agentbox logs [box] --daemon [-n N] [-f]");
+      log32.error("missing <service> argument");
+      log32.info("usage: agentbox logs [box] <service> [-n N] [-f]");
+      log32.info("       agentbox logs [box] --daemon [-n N] [-f]");
       process.exit(2);
     }
     const box = await resolveBoxOrExit(idOrName);
@@ -8630,7 +10045,7 @@ var logsCommand = new Command27("logs").description("Print recent log lines from
     if (!opts.follow) {
       const proc = await provider.exec(box, args, { user: "vscode" });
       if (proc.exitCode !== 0) {
-        log31.error(
+        log32.error(
           `${opts.daemon ? "daemon log" : "agentbox-ctl logs"} failed: ${proc.stderr || proc.stdout}`
         );
         process.exit(1);
@@ -8686,12 +10101,12 @@ var logsCommand = new Command27("logs").description("Print recent log lines from
 });
 
 // src/commands/open.ts
-import { log as log32 } from "@clack/prompts";
-import { execa as execa2 } from "execa";
-import { existsSync as existsSync6, mkdirSync as mkdirSync4 } from "fs";
-import { homedir as homedir10 } from "os";
-import { join as join12 } from "path";
-import { Command as Command28 } from "commander";
+import { log as log33 } from "@clack/prompts";
+import { execa as execa3 } from "execa";
+import { existsSync as existsSync7, mkdirSync as mkdirSync6 } from "fs";
+import { homedir as homedir14 } from "os";
+import { join as join16 } from "path";
+import { Command as Command30 } from "commander";
 
 // src/commands/path.ts
 async function runPath(box, opts) {
@@ -8713,7 +10128,7 @@ async function runPath(box, opts) {
 }
 
 // src/commands/open.ts
-var openCommand = new Command28("open").description("Open a box's /workspace in Finder (docker: rsync'd snapshot; cloud: sshfs mount)").argument(
+var openCommand = new Command30("open").description("Open a box's /workspace in Finder (docker: rsync'd snapshot; cloud: sshfs mount)").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).option("--no-refresh", "skip the rsync; open whatever's already on disk (docker only)").option(
@@ -8752,7 +10167,7 @@ var openCommand = new Command28("open").description("Open a box's /workspace in
   }
 });
 async function runCloudOpen(box, provider, opts) {
-  const mountRoot = join12(homedir10(), ".agentbox", "mounts", box.name);
+  const mountRoot = join16(homedir14(), ".agentbox", "mounts", box.name);
   if (opts.unmount) {
     const ok = await tryUnmount(mountRoot);
     if (ok) process.stdout.write(`unmounted ${mountRoot}
@@ -8789,14 +10204,14 @@ async function runCloudOpen(box, provider, opts) {
     user: target.user,
     identityFile: target.identityFile
   });
-  if (!existsSync6(mountRoot)) {
-    mkdirSync4(mountRoot, { recursive: true, mode: 493 });
+  if (!existsSync7(mountRoot)) {
+    mkdirSync6(mountRoot, { recursive: true, mode: 493 });
   } else if (await isMounted(mountRoot)) {
-    log32.info(`re-mounting (stale mount detected at ${mountRoot})`);
+    log33.info(`re-mounting (stale mount detected at ${mountRoot})`);
     await tryUnmount(mountRoot);
   }
-  log32.info(`mounting ${alias}:/workspace at ${mountRoot}`);
-  const mount = await execa2(
+  log33.info(`mounting ${alias}:/workspace at ${mountRoot}`);
+  const mount = await execa3(
     sshfsBin,
     [
       `${alias}:/workspace`,
@@ -8815,35 +10230,35 @@ async function runCloudOpen(box, provider, opts) {
   if (mount.exitCode !== 0) {
     throw new Error(`sshfs mount failed (exit ${String(mount.exitCode)}): ${mount.stderr || mount.stdout}`);
   }
-  await execa2("open", [mountRoot], { reject: false });
+  await execa3("open", [mountRoot], { reject: false });
   process.stdout.write(`opened ${mountRoot}
 `);
   process.stdout.write(`unmount later with: agentbox open ${box.name} --unmount
 `);
 }
 async function locateBinary(name) {
-  const r = await execa2("which", [name], { reject: false });
+  const r = await execa3("which", [name], { reject: false });
   if (r.exitCode !== 0) return null;
   const path = (r.stdout ?? "").trim();
   return path.length > 0 ? path : null;
 }
 async function isMounted(path) {
-  const r = await execa2("sh", ["-c", `mount | grep -F " on ${path} "`], { reject: false });
+  const r = await execa3("sh", ["-c", `mount | grep -F " on ${path} "`], { reject: false });
   return r.exitCode === 0;
 }
 async function tryUnmount(path) {
   if (await isMounted(path)) {
-    const u = await execa2("umount", [path], { reject: false });
+    const u = await execa3("umount", [path], { reject: false });
     if (u.exitCode === 0) return true;
-    const d = await execa2("diskutil", ["unmount", path], { reject: false });
+    const d = await execa3("diskutil", ["unmount", path], { reject: false });
     return d.exitCode === 0;
   }
   return false;
 }
 
 // src/commands/pause.ts
-import { Command as Command29 } from "commander";
-var pauseCommand = new Command29("pause").description(
+import { Command as Command31 } from "commander";
+var pauseCommand = new Command31("pause").description(
   "Pause a box. Docker: `docker pause` (cgroup freeze \u2014 sub-second resume). Cloud: backend.pause (Daytona archive \u2014 cold storage; resume is slower but uses no quota while archived)."
 ).argument(
   "[box]",
@@ -8865,220 +10280,9 @@ var pauseCommand = new Command29("pause").description(
   }
 });
 
-// src/commands/prepare.ts
-import { intro as intro6, log as log33, spinner as spinner7 } from "@clack/prompts";
-import { Command as Command30 } from "commander";
-async function dockerStatus() {
-  let img;
-  try {
-    img = await imageInfo(DEFAULT_BOX_IMAGE);
-  } catch {
-    return { daemon: "unreachable", volumes: [] };
-  }
-  const names = [SHARED_CLAUDE_VOLUME, SHARED_CODEX_VOLUME, SHARED_OPENCODE_VOLUME];
-  const volumes = await Promise.all(
-    names.map(async (name) => ({ name, exists: await volumeExists(name).catch(() => false) }))
-  );
-  return { daemon: "reachable", image: img, volumes };
-}
-function humanBytes(n) {
-  if (n === void 0 || !Number.isFinite(n)) return "\u2014";
-  if (n >= 1024 ** 3) return `${(n / 1024 ** 3).toFixed(2)} GB`;
-  if (n >= 1024 ** 2) return `${(n / 1024 ** 2).toFixed(1)} MB`;
-  if (n >= 1024) return `${(n / 1024).toFixed(1)} KB`;
-  return `${String(n)} B`;
-}
-function humanAge(iso) {
-  if (!iso) return "\u2014";
-  const t = Date.parse(iso);
-  if (!Number.isFinite(t)) return iso;
-  const ageSec = Math.max(0, (Date.now() - t) / 1e3);
-  if (ageSec < 60) return `${ageSec.toFixed(0)}s ago`;
-  if (ageSec < 3600) return `${(ageSec / 60).toFixed(0)}m ago`;
-  if (ageSec < 86400) return `${(ageSec / 3600).toFixed(1)}h ago`;
-  return `${(ageSec / 86400).toFixed(1)}d ago`;
-}
-function pad2(s, width) {
-  return s.length >= width ? s : s + " ".repeat(width - s.length);
-}
-async function renderDocker(status) {
-  const out = ["docker:"];
-  if (status.daemon === "unreachable") {
-    out.push("  docker daemon unreachable (is Docker running?)");
-    return out;
-  }
-  if (!status.image?.exists) {
-    out.push(`  image  ${DEFAULT_BOX_IMAGE}  (not built \u2014 run \`agentbox prepare --provider docker\`)`);
-  } else {
-    out.push(
-      `  image  ${pad2(DEFAULT_BOX_IMAGE, 30)} ${pad2(humanBytes(status.image.sizeBytes), 10)} built ${humanAge(status.image.createdAt)}`
-    );
-  }
-  for (const v of status.volumes) {
-    if (v.exists) {
-      out.push(`  vol    ${pad2(v.name, 30)} present`);
-    } else {
-      out.push(`  vol    ${pad2(v.name, 30)} (none \u2014 seeded lazily on first \`agentbox claude/codex/opencode\`)`);
-    }
-  }
-  return out;
-}
-async function daytonaStatus() {
-  try {
-    const mod = await import("./dist-CX5CGVEB.js");
-    return await mod.getDaytonaStatus();
-  } catch (err) {
-    return { configured: false, reason: err instanceof Error ? err.message.split("\n")[0] : String(err) };
-  }
-}
-function renderDaytona(status, pinnedImage) {
-  const out = ["daytona:"];
-  if (!status.configured) {
-    out.push(
-      `  (not configured \u2014 \`agentbox daytona login\` to set up${status.reason ? `; ${status.reason}` : ""})`
-    );
-    return out;
-  }
-  if (status.reason) out.push(`  warn: ${status.reason}`);
-  if (status.snapshots.length === 0) {
-    out.push("  no agentbox snapshots \u2014 run `agentbox prepare --provider daytona`");
-  } else {
-    for (const s of status.snapshots) {
-      const sizeStr = s.sizeGb !== void 0 ? `${s.sizeGb.toFixed(2)} GB` : "\u2014";
-      const pinned = pinnedImage && pinnedImage === s.name ? "  (pinned in project)" : "";
-      const tail = s.state === "error" && s.errorReason ? `  error: ${s.errorReason.slice(0, 80)}` : `  ${humanAge(s.createdAt)}`;
-      out.push(
-        `  snap   ${pad2(s.name, 40)} ${pad2(s.state ?? "\u2014", 10)} ${pad2(sizeStr, 10)}${tail}${pinned}`
-      );
-    }
-  }
-  if (status.volumes.length === 0) {
-    out.push("  no agentbox volumes \u2014 created lazily on first cloud `agentbox create`");
-  } else {
-    for (const v of status.volumes) {
-      const last = v.lastUsedAt ? `  last used ${humanAge(v.lastUsedAt)}` : "";
-      out.push(`  vol    ${pad2(v.name, 40)} ${pad2(v.state ?? "\u2014", 10)}${last}`);
-    }
-  }
-  return out;
-}
-async function showStatus(opts) {
-  const cfg = await loadEffectiveConfig(process.cwd()).catch(() => null);
-  const pinnedRaw = cfg?.effective.box.image;
-  const pinned = typeof pinnedRaw === "string" && pinnedRaw.length > 0 && pinnedRaw !== DEFAULT_BOX_IMAGE ? pinnedRaw : void 0;
-  const lines = [];
-  const wantDocker = !opts.onlyProvider || opts.onlyProvider === "docker";
-  const wantDaytona = !opts.onlyProvider || opts.onlyProvider === "daytona";
-  if (wantDocker) {
-    const status = await dockerStatus();
-    lines.push(...await renderDocker(status));
-  }
-  if (wantDaytona) {
-    if (lines.length > 0) lines.push("");
-    const status = await daytonaStatus();
-    lines.push(...renderDaytona(status, pinned));
-  }
-  if (pinned) {
-    lines.push("");
-    lines.push(`project pin:  box.image = ${pinned}`);
-  }
-  process.stdout.write(lines.join("\n") + "\n");
-}
-var prepareCommand = new Command30("prepare").description(
-  "Build base sandbox images / snapshots, or show what is already prepared across providers."
-).option(
-  "-p, --provider <name>",
-  "provider to prepare (docker | daytona | hetzner | vercel). Omit for status-only."
-).option(
-  "-n, --name <name>",
-  "snapshot name (Daytona only; default: agentbox-base-<timestamp>)"
-).option("-f, --force", "rebuild even if the image / snapshot already exists").option("-y, --yes", "skip confirmation prompts (cost / time warnings)").option("--status", "show status without preparing anything").action(async (opts) => {
-  if (!opts.provider || opts.status) {
-    await showStatus({});
-    return;
-  }
-  const providerName = opts.provider.trim();
-  if (!isKnownProvider(providerName)) {
-    process.stderr.write(
-      `error: --provider must be one of: docker, daytona, hetzner
-`
-    );
-    process.exit(1);
-  }
-  intro6(`preparing ${providerName} base image`);
-  if (providerName === "daytona" && !opts.yes && process.stdin.isTTY) {
-    process.stdout.write(
-      "This will trigger a Daytona image build (~7 min cold, ~seconds with cache) and register a named snapshot in your org.\nRe-run with --yes to skip this notice.\n"
-    );
-  }
-  const provider = await getProvider(providerName);
-  if (typeof provider.prepare !== "function") {
-    log33.error(`provider '${providerName}' does not implement prepare`);
-    process.exit(1);
-  }
-  const sp = spinner7();
-  sp.start(`preparing ${providerName}\u2026`);
-  try {
-    const result = await provider.prepare({
-      name: opts.name,
-      hostWorkspace: process.cwd(),
-      force: opts.force,
-      onLog: (line) => sp.message(line.slice(0, 80))
-    });
-    if (result.snapshotName !== void 0) {
-      sp.stop(`prepared ${providerName}: snapshot '${result.snapshotName}'`);
-      try {
-        const written = await setConfigValue(
-          "project",
-          "box.image",
-          result.snapshotName,
-          process.cwd()
-        );
-        log33.success(`box.image = ${result.snapshotName} (written to ${written.path})`);
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        log33.warn(
-          `prepared snapshot '${result.snapshotName}', but failed to pin it into the project config: ${msg}
-Run \`agentbox config set --project box.image ${result.snapshotName}\` manually.`
-        );
-      }
-    } else {
-      sp.stop(`prepared ${providerName}`);
-    }
-    process.stdout.write("\n");
-    await showStatus({ onlyProvider: providerName });
-    log33.info(
-      "tip: install the agentbox host skill so Claude Code on this machine can drive AgentBox for you:\n  npx skills add https://github.com/madarco/agentbox --skill agentbox"
-    );
-  } catch (err) {
-    sp.stop(`prepare failed: ${describeError(err)}`);
-    process.exit(1);
-  }
-});
-function describeError(err) {
-  if (!(err instanceof Error)) return String(err);
-  const parts = [err.message];
-  let cause = err.cause;
-  for (let i = 0; i < 5 && cause; i++) {
-    if (cause instanceof Error) {
-      parts.push(`caused by: ${cause.message}`);
-      const code = cause.code;
-      if (typeof code === "string") parts.push(`(${code})`);
-      cause = cause.cause;
-    } else if (typeof cause === "object") {
-      parts.push(`caused by: ${JSON.stringify(cause)}`);
-      break;
-    } else {
-      parts.push(`caused by: ${String(cause)}`);
-      break;
-    }
-  }
-  return parts.join(" \u2014 ");
-}
-
 // src/commands/prune.ts
-import { confirm as confirm14, isCancel as isCancel15, log as log34 } from "@clack/prompts";
-import { Command as Command31 } from "commander";
+import { confirm as confirm15, isCancel as isCancel16, log as log34 } from "@clack/prompts";
+import { Command as Command32 } from "commander";
 function totalRemovals(r, projectConfigs) {
   return r.removedRecords.length + r.removedContainers.length + r.removedVolumes.length + r.removedSnapshotDirs.length + r.removedBoxDirs.length + projectConfigs.length;
 }
@@ -9124,7 +10328,7 @@ async function liveProjectRoots() {
     return [];
   }
 }
-var pruneCommand = new Command31("prune").description("Clean up orphan state.json records (and with --all, orphan docker resources)").option("--dry-run", "show what would be removed, don't change anything").option(
+var pruneCommand = new Command32("prune").description("Clean up orphan state.json records (and with --all, orphan docker resources)").option("--dry-run", "show what would be removed, don't change anything").option(
   "--all",
   "also remove orphan agentbox-* containers, volumes, snapshot dirs, and orphan per-project config dirs"
 ).option("-y, --yes", "skip the confirmation prompt").option(
@@ -9154,8 +10358,8 @@ var pruneCommand = new Command31("prune").description("Clean up orphan state.jso
 ${summary(preview, previewProjects)}`);
     if (dryRun) return;
     if (!opts.yes) {
-      const ok = await confirm14({ message: "Proceed with prune?", initialValue: true });
-      if (isCancel15(ok) || !ok) {
+      const ok = await confirm15({ message: "Proceed with prune?", initialValue: true });
+      if (isCancel16(ok) || !ok) {
         log34.info("cancelled");
         return;
       }
@@ -9173,19 +10377,9 @@ var CLOUD_PRUNE_PROVIDERS = ["daytona", "hetzner", "vercel"];
 function isCloudPruneProvider(name) {
   return CLOUD_PRUNE_PROVIDERS.includes(name);
 }
-async function cloudBackendFor(provider) {
-  switch (provider) {
-    case "daytona":
-      return (await import("./dist-CX5CGVEB.js")).daytonaBackend;
-    case "hetzner":
-      return (await import("./dist-GDHP34ZK.js")).hetznerBackend;
-    case "vercel":
-      return (await import("./dist-XML54CNB.js")).vercelBackend;
-  }
-}
 async function pruneCloud(provider, opts) {
   const dryRun = opts.dryRun ?? false;
-  const backend = await cloudBackendFor(provider);
+  const backend = await cloudBackendForProvider(provider);
   if (!backend.list) {
     log34.error(`${provider} backend doesn't expose \`list()\`; cannot enumerate sandboxes for prune`);
     process.exit(2);
@@ -9218,11 +10412,11 @@ async function pruneCloud(provider, opts) {
   }
   if (dryRun) return;
   if (!opts.yes) {
-    const ok = await confirm14({
+    const ok = await confirm15({
       message: `Delete ${String(orphans.length)} orphan sandbox(es)?`,
       initialValue: false
     });
-    if (isCancel15(ok) || !ok) {
+    if (isCancel16(ok) || !ok) {
       log34.info("cancelled");
       return;
     }
@@ -9249,10 +10443,10 @@ async function pruneCloud(provider, opts) {
 // src/commands/queue.ts
 import { readFile as readFile4, stat as stat5 } from "fs/promises";
 import { intro as intro7, log as log35, outro as outro7 } from "@clack/prompts";
-import { Command as Command32 } from "commander";
+import { Command as Command33 } from "commander";
 var TERMINAL_STATUSES = /* @__PURE__ */ new Set(["done", "failed", "cancelled"]);
-var queueCommand = new Command32("queue").description("Inspect and manage background `agentbox claude|codex|opencode -i` jobs");
-var queueListCommand = new Command32("list").description("List queued, running, and (with --all) terminal background jobs").option("--all", "include done/failed/cancelled jobs (default: hide terminal)").action(async (opts) => {
+var queueCommand = new Command33("queue").description("Inspect and manage background `agentbox claude|codex|opencode -i` jobs");
+var queueListCommand = new Command33("list").description("List queued, running, and (with --all) terminal background jobs").option("--all", "include done/failed/cancelled jobs (default: hide terminal)").action(async (opts) => {
   const jobs = await loadQueue();
   const cfg = await loadQueueConfig();
   const visible = opts.all === true ? jobs : jobs.filter((j) => !TERMINAL_STATUSES.has(j.status));
@@ -9275,17 +10469,17 @@ var queueListCommand = new Command32("list").description("List queued, running,
   const widths = headers.map(
     (h) => Math.max(h.length, ...rows.map((r) => String(r[h]).length))
   );
-  const pad3 = (s, w) => s + " ".repeat(Math.max(0, w - s.length));
-  process.stdout.write(headers.map((h, i) => pad3(h, widths[i])).join("  ") + "\n");
+  const pad4 = (s, w) => s + " ".repeat(Math.max(0, w - s.length));
+  process.stdout.write(headers.map((h, i) => pad4(h, widths[i])).join("  ") + "\n");
   process.stdout.write(widths.map((w) => "-".repeat(w)).join("  ") + "\n");
   for (const r of rows) {
     process.stdout.write(
-      headers.map((h, i) => pad3(String(r[h]), widths[i])).join("  ") + "\n"
+      headers.map((h, i) => pad4(String(r[h]), widths[i])).join("  ") + "\n"
     );
   }
   log35.info(`queue.maxConcurrent = ${String(cfg.maxConcurrent)} (queue.enabled=${String(cfg.enabled)})`);
 });
-var queueShowCommand = new Command32("show").description("Dump a job manifest and tail its log").argument("<id>", "queue job id (from `agentbox queue list`)").option("--tail <n>", "lines of log to print (default: 50)", "50").action(async (id, opts) => {
+var queueShowCommand = new Command33("show").description("Dump a job manifest and tail its log").argument("<id>", "queue job id (from `agentbox queue list`)").option("--tail <n>", "lines of log to print (default: 50)", "50").action(async (id, opts) => {
   const job = await readJob(id);
   if (!job) {
     log35.error(`no job with id ${id}`);
@@ -9307,7 +10501,7 @@ var queueShowCommand = new Command32("show").description("Dump a job manifest an
     log35.info(`(no log at ${job.logPath} yet)`);
   }
 });
-var queueCancelCommand = new Command32("cancel").description("Cancel a queued job; running jobs are NOT killed \u2014 use `agentbox destroy` instead").argument("<id>", "queue job id (from `agentbox queue list`)").action(async (id) => {
+var queueCancelCommand = new Command33("cancel").description("Cancel a queued job; running jobs are NOT killed \u2014 use `agentbox destroy` instead").argument("<id>", "queue job id (from `agentbox queue list`)").action(async (id) => {
   intro7(`Cancelling queue job ${id}...`);
   const job = await readJob(id);
   if (!job) {
@@ -9329,7 +10523,7 @@ var queueCancelCommand = new Command32("cancel").description("Cancel a queued jo
   await writeJob(cancelled);
   outro7(`job ${id} cancelled`);
 });
-var queueClearCommand = new Command32("clear").description("Sweep terminal-state manifests from ~/.agentbox/queue/").option("--done", "remove done jobs").option("--failed", "remove failed jobs").option("--cancelled", "remove cancelled jobs").option("--all", "remove every terminal-state job (done + failed + cancelled)").action(async (opts) => {
+var queueClearCommand = new Command33("clear").description("Sweep terminal-state manifests from ~/.agentbox/queue/").option("--done", "remove done jobs").option("--failed", "remove failed jobs").option("--cancelled", "remove cancelled jobs").option("--all", "remove every terminal-state job (done + failed + cancelled)").action(async (opts) => {
   const targets = /* @__PURE__ */ new Set();
   if (opts.all === true || opts.done === true) targets.add("done");
   if (opts.all === true || opts.failed === true) targets.add("failed");
@@ -9358,7 +10552,7 @@ var QUEUE_WAIT_EVENTS = [
 var ACTIVE_JOB_STATUSES = /* @__PURE__ */ new Set(["queued", "running"]);
 var DEFAULT_QUEUE_WAIT_TIMEOUT_MS = 10 * 60 * 1e3;
 var QUEUE_POLL_INTERVAL_MS = 500;
-var queueWaitForCommand = new Command32("wait-for").description(
+var queueWaitForCommand = new Command33("wait-for").description(
   `Block until a queue / box event fires. <event> one of: ${QUEUE_WAIT_EVENTS.join(" | ")}.`
 ).argument("<event>", `target event: ${QUEUE_WAIT_EVENTS.join(" | ")}`).option("--box <ref>", "box ref (required for box-paused / box-running / box-stopped)").option("--job <id>", "queue job id (required for job-done)").option("--timeout <ms>", `wall-clock cap (default: ${String(DEFAULT_QUEUE_WAIT_TIMEOUT_MS)})`).option("--json", "emit a JSON envelope { matched, elapsedMs, ... }").action(async (eventRaw, opts) => {
   if (!QUEUE_WAIT_EVENTS.includes(eventRaw)) {
@@ -9446,11 +10640,11 @@ async function pollUntil(deadline, probe) {
     if (result !== void 0) return result;
     const remaining = deadline - Date.now();
     if (remaining <= 0) break;
-    await sleep3(Math.min(QUEUE_POLL_INTERVAL_MS, remaining));
+    await sleep4(Math.min(QUEUE_POLL_INTERVAL_MS, remaining));
   }
   throw new QueueWaitTimeout();
 }
-function sleep3(ms) {
+function sleep4(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
 function parsePositiveInt3(raw, label) {
@@ -9483,8 +10677,8 @@ function truncate(s, max) {
 }
 
 // src/commands/relay.ts
-import { log as log36, spinner as spinner8 } from "@clack/prompts";
-import { Command as Command33 } from "commander";
+import { log as log36, spinner as spinner9 } from "@clack/prompts";
+import { Command as Command34 } from "commander";
 async function rehydrateFromState() {
   const state = await readState();
   await rehydrateRelayRegistry(
@@ -9508,12 +10702,14 @@ function renderStatus(s) {
   if (s.running && s.health) {
     return [
       "relay: running",
-      `  pid:    ${s.pid === null ? "?" : String(s.pid)}`,
-      `  port:   ${String(s.port)}`,
-      `  url:    ${s.endpoint.hostUrl}`,
-      `  boxes:  ${String(s.health.boxes)}`,
-      `  events: ${String(s.health.events)}`,
-      `  log:    ${s.logFile}`
+      `  pid:     ${s.pid === null ? "?" : String(s.pid)}`,
+      `  port:    ${String(s.port)}`,
+      `  url:     ${s.endpoint.hostUrl}`,
+      `  version: ${s.health.version ?? "(unknown \u2014 relay predates version field)"}`,
+      `  commit:  ${s.health.commit ?? "(unknown)"}`,
+      `  boxes:   ${String(s.health.boxes)}`,
+      `  events:  ${String(s.health.events)}`,
+      `  log:     ${s.logFile}`
     ].join("\n");
   }
   if (s.pidAlive) {
@@ -9524,7 +10720,7 @@ function renderStatus(s) {
   }
   return ["relay: not running", `  log:    ${s.logFile}`].join("\n");
 }
-var statusSub = new Command33("status").description("Show whether the host relay is running, with pid / port / box count").option("--json", "emit RelayStatus as JSON").action(async (opts) => {
+var statusSub = new Command34("status").description("Show whether the host relay is running, with pid / port / box count").option("--json", "emit RelayStatus as JSON").action(async (opts) => {
   try {
     const s = await getRelayStatus();
     if (opts.json) {
@@ -9536,9 +10732,9 @@ var statusSub = new Command33("status").description("Show whether the host relay
     handleLifecycleError(err);
   }
 });
-var stopSub = new Command33("stop").description("Stop the host relay process (idempotent)").action(async () => {
+var stopSub = new Command34("stop").description("Stop the host relay process (idempotent)").action(async () => {
   try {
-    const s = spinner8();
+    const s = spinner9();
     s.start("stopping relay");
     const result = await stopRelay();
     s.stop(
@@ -9548,9 +10744,9 @@ var stopSub = new Command33("stop").description("Stop the host relay process (id
     handleLifecycleError(err);
   }
 });
-var startSub = new Command33("start").description("Start the host relay if not already running (idempotent)").action(async () => {
+var startSub = new Command34("start").description("Start the host relay if not already running (idempotent)").action(async () => {
   try {
-    const s = spinner8();
+    const s = spinner9();
     s.start("starting relay");
     const ep = await ensureRelay();
     await rehydrateFromState();
@@ -9559,15 +10755,15 @@ var startSub = new Command33("start").description("Start the host relay if not a
     handleLifecycleError(err);
   }
 });
-var restartSub = new Command33("restart").description("Stop then start the host relay").action(async () => {
+var restartSub = new Command34("restart").description("Stop then start the host relay").action(async () => {
   try {
-    const s = spinner8();
+    const s = spinner9();
     s.start("stopping relay");
     const stopped = await stopRelay();
     s.stop(
       stopped.stopped ? `stopped relay (pid ${String(stopped.pid)})` : "relay was not running"
     );
-    const s2 = spinner8();
+    const s2 = spinner9();
     s2.start("starting relay");
     try {
       const ep = await ensureRelay();
@@ -9582,11 +10778,11 @@ var restartSub = new Command33("restart").description("Stop then start the host
     handleLifecycleError(err);
   }
 });
-var relayCommand = new Command33("relay").description("Manage the host relay process (status / stop / start / restart)").addCommand(statusSub, { isDefault: true }).addCommand(stopSub).addCommand(startSub).addCommand(restartSub);
+var relayCommand = new Command34("relay").description("Manage the host relay process (status / stop / start / restart)").addCommand(statusSub, { isDefault: true }).addCommand(stopSub).addCommand(startSub).addCommand(restartSub);
 
 // src/commands/_run-queued-job.ts
-import { Command as Command34 } from "commander";
-var runQueuedJobCommand = new Command34("_run-queued-job").description("internal: run a queued background agent job (do not invoke directly)").argument("<id>", "queue job id (from ~/.agentbox/queue/<id>.json)").action(async (id) => {
+import { Command as Command35 } from "commander";
+var runQueuedJobCommand = new Command35("_run-queued-job").description("internal: run a queued background agent job (do not invoke directly)").argument("<id>", "queue job id (from ~/.agentbox/queue/<id>.json)").action(async (id) => {
   const log45 = openCommandLog(`queue-${id}`);
   log45.write(`worker pid=${String(process.pid)} starting for job ${id}`);
   let job = null;
@@ -9682,7 +10878,7 @@ async function runDockerJob(job, log45, onBoxCreated) {
     log45.write(`starting claude session`);
     await startClaudeSession({
       container: result.record.container,
-      claudeArgs: promptedArgs,
+      claudeArgs: applyClaudeSkipPermissions(promptedArgs, cfg.effective),
       sessionName: cfg.effective.claude.sessionName,
       boxName: result.record.name
     });
@@ -9694,7 +10890,7 @@ async function runDockerJob(job, log45, onBoxCreated) {
     log45.write(`starting codex session`);
     await startCodexSession({
       container: result.record.container,
-      codexArgs: promptedArgs,
+      codexArgs: applyCodexSkipPermissions(promptedArgs, cfg.effective),
       sessionName: cfg.effective.codex.sessionName
     });
   } else if (job.agent === "opencode") {
@@ -9729,13 +10925,20 @@ function buildOverridesFromJob(job) {
     else if (job.agent === "codex") out.codex = { sessionName: opts.sessionName };
     else if (job.agent === "opencode") out.opencode = { sessionName: opts.sessionName };
   }
+  if (opts.dangerouslySkipPermissions !== void 0) {
+    if (job.agent === "claude-code") {
+      out.claude = { ...out.claude, dangerouslySkipPermissions: opts.dangerouslySkipPermissions };
+    } else if (job.agent === "codex") {
+      out.codex = { ...out.codex, dangerouslySkipPermissions: opts.dangerouslySkipPermissions };
+    }
+  }
   return out;
 }
 
 // src/commands/screen.ts
 import { spawnSync as spawnSync3 } from "child_process";
 import { log as log37 } from "@clack/prompts";
-import { Command as Command35 } from "commander";
+import { Command as Command36 } from "commander";
 var SIGNED_URL_TTL_MIN = 1;
 var SIGNED_URL_TTL_MAX = 86400;
 function parseTtlOrExit(raw) {
@@ -9748,7 +10951,7 @@ function parseTtlOrExit(raw) {
   }
   return n;
 }
-var screenCommand = new Command35("screen").description("Open a box's VNC (noVNC) viewer in the browser (auto-unpause/start)").argument(
+var screenCommand = new Command36("screen").description("Open a box's VNC (noVNC) viewer in the browser (auto-unpause/start)").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).option("--print", "print the URL to stdout instead of launching the browser").option("--loopback", "docker only: use the 127.0.0.1 URL instead of the OrbStack .orb.local URL").option(
@@ -9813,6 +11016,28 @@ var screenCommand = new Command35("screen").description("Open a box's VNC (noVNC
       } else if (state === "missing") {
         throw new Error(`cloud sandbox for ${box.name} is missing; was it deleted?`);
       }
+      const persisted = await readBoxStatus(box);
+      const hasWebService = persisted?.services.some((s) => s.expose) ?? false;
+      if (hasWebService) {
+        try {
+          const webUrl = await p.resolveUrl(box, { kind: "web" });
+          const q = `'${webUrl.replace(/'/g, "'\\''")}'`;
+          const br = await p.exec(box, ["bash", "-lc", `agent-browser open --headed ${q}`], {
+            user: "vscode"
+          });
+          if (br.exitCode === 0) {
+            log37.info(`opened ${webUrl} in the in-box browser (visible in the VNC view)`);
+          } else {
+            log37.warn(
+              `could not open in-box browser (continuing): ${br.stderr.trim() || br.stdout.trim() || `exit ${String(br.exitCode)}`}`
+            );
+          }
+        } catch (err) {
+          log37.warn(
+            `in-box browser skipped: ${err instanceof Error ? err.message : String(err)}`
+          );
+        }
+      }
       const base = await p.resolveUrl(box, { kind: "vnc", ttl });
       url = `${base.replace(/\/$/, "")}/vnc.html?autoconnect=1&password=${encodeURIComponent(box.vncPassword)}`;
     }
@@ -9835,7 +11060,7 @@ var screenCommand = new Command35("screen").description("Open a box's VNC (noVNC
 // src/commands/shell.ts
 import { spawnSync as spawnSync4 } from "child_process";
 import { log as log39 } from "@clack/prompts";
-import { Command as Command36 } from "commander";
+import { Command as Command37 } from "commander";
 
 // src/commands/_provider-guard.ts
 import { log as log38 } from "@clack/prompts";
@@ -9950,7 +11175,7 @@ async function startOrAttachShell(box, cfg) {
   });
   process.exit(code);
 }
-var shellCommand = new Command36("shell").description(
+var shellCommand = new Command37("shell").description(
   "Open an interactive shell in a box, in a detachable tmux session (auto-unpause/start)"
 ).argument(
   "[box]",
@@ -10041,7 +11266,7 @@ var shellCommand = new Command36("shell").description(
     handleLifecycleError(err);
   }
 });
-var shellAttachCommand = new Command36("attach").description(
+var shellAttachCommand = new Command37("attach").description(
   "Attach to a shell tmux session in a box, starting one if none is running (auto-unpause/start)"
 ).argument(
   "[box]",
@@ -10079,7 +11304,7 @@ function renderShellTable(sessions) {
   for (const r of rows) process.stdout.write(`${fmt(r)}
 `);
 }
-var shellLsCommand = new Command36("ls").description("List the shell tmux sessions running in a box").argument(
+var shellLsCommand = new Command37("ls").description("List the shell tmux sessions running in a box").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).action(async (idOrName) => {
@@ -10102,7 +11327,7 @@ var shellLsCommand = new Command36("ls").description("List the shell tmux sessio
     handleLifecycleError(err);
   }
 });
-var shellKillCommand = new Command36("kill").description("Kill a shell tmux session in a box (the shell and anything running in it)").argument(
+var shellKillCommand = new Command37("kill").description("Kill a shell tmux session in a box (the shell and anything running in it)").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).option("-n, --name <label>", "shell label to kill (default: the box default shell)").option("--all", "kill every shell session in the box").action(async function(idOrName) {
@@ -10140,8 +11365,8 @@ shellCommand.addCommand(shellLsCommand);
 shellCommand.addCommand(shellKillCommand);
 
 // src/commands/start.ts
-import { Command as Command37 } from "commander";
-var startCommand = new Command37("start").description(
+import { Command as Command38 } from "commander";
+var startCommand = new Command38("start").description(
   "Start a stopped box. Docker: docker start + relaunch ctl/dockerd/vnc daemons. Cloud: backend.start, then re-resolve preview URLs/tokens, re-launch in-sandbox ctl/dockerd daemons, and re-register with the host relay (so the CloudBoxPoller resumes)."
 ).argument(
   "[box]",
@@ -10165,7 +11390,7 @@ var startCommand = new Command37("start").description(
 
 // src/commands/status.ts
 import { log as log41 } from "@clack/prompts";
-import { Command as Command38 } from "commander";
+import { Command as Command39 } from "commander";
 
 // src/endpoints-render.ts
 function renderEndpointLines(endpoints, stream) {
@@ -10377,7 +11602,7 @@ async function runInspect(box, opts) {
 
 // src/commands/status.ts
 var statusCommand2 = withWatchOptions(
-  new Command38("status").description("Show service + task status from a box's agentbox-ctl daemon").argument(
+  new Command39("status").description("Show service + task status from a box's agentbox-ctl daemon").argument(
     "[box]",
     "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
   ).option("-j, --json", "machine-readable JSON output").option("--inspect", "show detailed box info (volumes, limits, paths) instead of service/task status")
@@ -10551,8 +11776,8 @@ function renderPersisted2(s, state) {
 }
 
 // src/commands/stop.ts
-import { Command as Command39 } from "commander";
-var stopCommand = new Command39("stop").description(
+import { Command as Command40 } from "commander";
+var stopCommand = new Command40("stop").description(
   "Stop a box (Docker: docker stop; preserves upper + node_modules volumes. Cloud: backend.stop \u2014 sandbox stays in your account, disk preserved)."
 ).argument(
   "[box]",
@@ -10581,7 +11806,7 @@ restart with: agentbox start ${box.name}
 });
 
 // src/commands/top.ts
-import { Command as Command40 } from "commander";
+import { Command as Command41 } from "commander";
 var COLS = ["BOX", "STATE", "CPU%", "MEM USAGE / LIMIT", "MEM%", "PIDS", "DISK", "NET I/O"];
 function row(name, state, s) {
   const mem = `${fmtBytes(s.memUsedBytes)} / ${fmtBytes(s.memLimitBytes)}`;
@@ -10614,6 +11839,7 @@ async function selectBoxes(idOrName, opts) {
 }
 async function snapshot(idOrName, opts) {
   const boxes = await selectBoxes(idOrName, opts);
+  if (opts.live) await applyLiveCloudStates(boxes);
   const stats = await Promise.all(
     boxes.map((b) => {
       if ((b.provider ?? "docker") !== "docker") return emptyStats(b.provider ?? "cloud");
@@ -10654,10 +11880,10 @@ async function renderProjectFooters() {
 
 SYSTEM: ${parts.join(" - ")}` : "";
 }
-var topCommand = new Command40("top").description("Live resource monitor (cpu/mem/pids/disk) for a box, the project, or every box").argument(
+var topCommand = new Command41("top").description("Live resource monitor (cpu/mem/pids/disk) for a box, the project, or every box").argument(
   "[box]",
   "box ref (default: every box on the host; --project narrows to the cwd's project)"
-).option("-p, --project", "show only boxes in the cwd's project").option("--once", "print a single snapshot instead of watching").option("-j, --json", "machine-readable JSON (implies --once)").option("--interval <seconds>", "refresh interval", "2").action(async (idOrName, opts) => {
+).option("-p, --project", "show only boxes in the cwd's project").option("--once", "print a single snapshot instead of watching").option("-j, --json", "machine-readable JSON (implies --once)").option("--interval <seconds>", "refresh interval", "2").option("--live", "probe live cloud state via the provider SDK (slower; default: last host-known)").action(async (idOrName, opts) => {
   try {
     if (opts.json) {
       const { boxes, stats } = await snapshot(idOrName, opts);
@@ -10687,8 +11913,8 @@ var topCommand = new Command40("top").description("Live resource monitor (cpu/me
 });
 
 // src/commands/unpause.ts
-import { Command as Command41 } from "commander";
-var unpauseCommand = new Command41("unpause").description(
+import { Command as Command42 } from "commander";
+var unpauseCommand = new Command42("unpause").description(
   "Resume a paused box. Docker: `docker unpause` (sub-second). Cloud: backend.resume (re-hydrates from archive \u2014 slower first time)."
 ).argument(
   "[box]",
@@ -10712,8 +11938,8 @@ var unpauseCommand = new Command41("unpause").description(
 
 // src/commands/update.ts
 import { spawn as spawn4 } from "child_process";
-import { confirm as confirm15, intro as intro8, isCancel as isCancel16, log as log42, outro as outro8, spinner as spinner9 } from "@clack/prompts";
-import { Command as Command42 } from "commander";
+import { confirm as confirm16, intro as intro8, isCancel as isCancel17, log as log42, outro as outro8, spinner as spinner10 } from "@clack/prompts";
+import { Command as Command43 } from "commander";
 
 // src/exec-method.ts
 function detectExecutionMethod(input) {
@@ -10757,7 +11983,7 @@ function runInherit(cmd, args) {
     child.on("close", (code) => resolveP(code ?? 0));
   });
 }
-var updateCommand = new Command42("self-update").description(
+var updateCommand = new Command43("self-update").description(
   "Update agentbox: self-update via npm/pnpm (unless run via npx), wipe the box image so it rebuilds, and reload the relay"
 ).option("-y, --yes", "skip the confirmation prompt").option("--dry-run", "show what would happen, don't change anything").option("--skip-self", "skip the package self-update; only refresh the image + relay").action(async (opts) => {
   try {
@@ -10780,8 +12006,8 @@ var updateCommand = new Command42("self-update").description(
       return;
     }
     if (!opts.yes) {
-      const ok = await confirm15({ message: "Proceed with update?", initialValue: true });
-      if (isCancel16(ok) || !ok) {
+      const ok = await confirm16({ message: "Proceed with update?", initialValue: true });
+      if (isCancel17(ok) || !ok) {
         log42.info("cancelled");
         return;
       }
@@ -10803,13 +12029,13 @@ var updateCommand = new Command42("self-update").description(
         log42.success(`updated ${PKG} via ${cmd.cmd}`);
       }
     }
-    const s = spinner9();
+    const s = spinner10();
     s.start(`removing image ${DEFAULT_BOX_IMAGE}`);
     const removed = await removeImage(DEFAULT_BOX_IMAGE);
     s.stop(
       removed ? `removed image ${DEFAULT_BOX_IMAGE} (rebuilds on next create/claude)` : `image ${DEFAULT_BOX_IMAGE} not present (nothing to remove)`
     );
-    const sr = spinner9();
+    const sr = spinner10();
     sr.start("stopping relay");
     const stop = await stopRelay();
     sr.stop(
@@ -10820,7 +12046,7 @@ var updateCommand = new Command42("self-update").description(
         "relay will restart automatically (with the updated build) on your next `agentbox create` / `agentbox claude`"
       );
     } else {
-      const sr2 = spinner9();
+      const sr2 = spinner10();
       sr2.start("restarting relay");
       try {
         const ep = await ensureRelay();
@@ -10841,7 +12067,7 @@ var updateCommand = new Command42("self-update").description(
 // src/commands/url.ts
 import { spawnSync as spawnSync5 } from "child_process";
 import { log as log43 } from "@clack/prompts";
-import { Command as Command43 } from "commander";
+import { Command as Command44 } from "commander";
 var SIGNED_URL_TTL_MIN2 = 1;
 var SIGNED_URL_TTL_MAX2 = 86400;
 function parseTtlOrExit2(raw) {
@@ -10854,7 +12080,7 @@ function parseTtlOrExit2(raw) {
   }
   return n;
 }
-var urlCommand = new Command43("url").description(
+var urlCommand = new Command44("url").description(
   "Open a box's web app URL in the browser, even when no service declares `expose:` (auto-unpause/start)"
 ).argument(
   "[box]",
@@ -10933,8 +12159,8 @@ var urlCommand = new Command43("url").description(
 
 // src/commands/wait.ts
 import { log as log44 } from "@clack/prompts";
-import { Command as Command44 } from "commander";
-var waitCommand = new Command44("wait").description("Block until the box reports all autostart units ready").argument(
+import { Command as Command45 } from "commander";
+var waitCommand = new Command45("wait").description("Block until the box reports all autostart units ready").argument(
   "[box]",
   "box ref: project index, id, id prefix, name, or container (default: the only box in this project)"
 ).option("--timeout <ms>", "overall timeout in milliseconds", "120000").option("--units <names...>", "restrict to the named units").option("-j, --json", "machine-readable JSON output").action(async (idOrName, opts) => {
@@ -10974,14 +12200,14 @@ var SUGARED_COMMANDS = ["create", "claude", "codex", "opencode"];
 function isSugared(name) {
   return SUGARED_COMMANDS.includes(name);
 }
-function rewriteProviderPrefix(argv) {
-  if (argv.length < 4) return [...argv];
-  const provider = argv[2];
-  const subcmd = argv[3];
-  if (typeof provider !== "string" || typeof subcmd !== "string") return [...argv];
-  if (!isKnownProvider(provider) || !isSugared(subcmd)) return [...argv];
-  const head = argv.slice(0, 2);
-  const rest = argv.slice(4);
+function rewriteProviderPrefix(argv2) {
+  if (argv2.length < 4) return [...argv2];
+  const provider = argv2[2];
+  const subcmd = argv2[3];
+  if (typeof provider !== "string" || typeof subcmd !== "string") return [...argv2];
+  if (!isKnownProvider(provider) || !isSugared(subcmd)) return [...argv2];
+  const head = argv2.slice(0, 2);
+  const rest = argv2.slice(4);
   return [...head, subcmd, "--provider", provider, ...rest];
 }
 
@@ -10989,7 +12215,7 @@ function rewriteProviderPrefix(argv) {
 process.env.DOCKER_CLI_HINTS ??= "false";
 process.env.AGENTBOX_CLI_VERSION = AGENTBOX_VERSION;
 process.env.AGENTBOX_CLI_COMMIT = AGENTBOX_COMMIT;
-var program = new Command45();
+var program = new Command46();
 program.name("agentbox").description("Launch coding agents in isolated sandboxes").version(AGENTBOX_VERSION);
 program.enablePositionalOptions();
 program.addCommand(createCommand);
@@ -11031,10 +12257,43 @@ program.addCommand(vercelCommand);
 program.addCommand(dockerCommand);
 program.addCommand(updateCommand);
 program.addCommand(installCommand);
+program.addCommand(doctorCommand);
 program.configureHelp({ visibleCommands: () => [] });
 program.addHelpText("after", () => "\n" + buildGroupedHelp(program));
 await applyEngineOverrideAtStartup();
-program.parseAsync(rewriteProviderPrefix(process.argv)).catch((err) => {
+var argv = rewriteProviderPrefix(process.argv);
+var FIRST_RUN_EXEMPT = /* @__PURE__ */ new Set([
+  "install",
+  "doctor",
+  "help",
+  "relay",
+  "_run-queued-job",
+  "drive",
+  "screen"
+]);
+function isFirstRunHookEligible(args) {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) return false;
+  const rest = args.slice(2);
+  if (rest.length === 0) return false;
+  for (const a of rest) {
+    if (a === "--help" || a === "-h" || a === "--version" || a === "-V") return false;
+  }
+  const first = rest[0];
+  if (typeof first !== "string" || first.startsWith("-")) return false;
+  if (FIRST_RUN_EXEMPT.has(first)) return false;
+  return true;
+}
+if (isFirstRun() && isFirstRunHookEligible(argv)) {
+  try {
+    await runInstallWizard({ fromAutoTrigger: true });
+  } catch (err) {
+    process.stderr.write(
+      `install wizard failed: ${err instanceof Error ? err.message : String(err)}
+`
+    );
+  }
+}
+program.parseAsync(argv).catch((err) => {
   console.error(err);
   process.exit(1);
 });