boxdown 1.0.0

package/LICENSE

@@ -0,0 +1,191 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        https://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2026 Liran Tal <liran.tal@gmail.com>.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       https://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,115 @@
+<!-- markdownlint-disable -->
+
+<p align="center">
+  <h1 align="center">
+    boxdown
+  </h1>
+</p>
+
+<p align="center">
+  Start and SSH into a reusable Dev Container environment for any local project.
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/boxdown"><img src="https://badgen.net/npm/v/boxdown" alt="npm version"/></a>
+  <a href="https://www.npmjs.com/package/boxdown"><img src="https://badgen.net/npm/license/boxdown" alt="license"/></a>
+  <a href="https://www.npmjs.com/package/boxdown"><img src="https://badgen.net/npm/dt/boxdown" alt="downloads"/></a>
+  <a href="https://github.com/lirantal/boxdown/actions/workflows/ci.yml"><img src="https://github.com/lirantal/boxdown/actions/workflows/ci.yml/badge.svg?branch=main" alt="build"/></a>
+  <a href="https://app.codecov.io/gh/lirantal/boxdown"><img src="https://badgen.net/codecov/c/github/lirantal/boxdown" alt="codecov"/></a>
+  <a href="./SECURITY.md"><img src="https://img.shields.io/badge/Security-Responsible%20Disclosure-yellow.svg" alt="Responsible Disclosure Policy" /></a>
+</p>
+
+## Install
+
+```sh
+npm install -g boxdown
+```
+
+You can also run it without installing:
+
+```sh
+npx boxdown start
+```
+
+## Usage
+
+From any project repository on your host:
+
+```sh
+npx boxdown start
+```
+
+Boxdown builds or reuses a Dev Container for the current directory, then opens a shell inside it. The target repository stays clean; Boxdown writes generated configuration and SSH keys under user cache/data directories instead of copying `.devcontainer/` into the project.
+
+Boxdown ships and invokes its own `@devcontainers/cli` dependency. It does not require a host/global Dev Containers CLI install.
+
+### Portless SSH
+
+Install an SSH alias for the current project:
+
+```sh
+npx boxdown ssh-config install
+```
+
+By default this creates a `<repo-name>-devcontainer` SSH host. Validate it with:
+
+```sh
+ssh <repo-name>-devcontainer 'whoami && pwd'
+```
+
+Use the same alias in Cursor, Claude, Codex, or any SSH-capable tool.
+
+### Commands
+
+```sh
+boxdown start
+boxdown codex
+boxdown claude
+boxdown cc
+boxdown opencode
+boxdown antigravity
+boxdown list
+boxdown status
+boxdown stop
+boxdown down
+boxdown doctor
+boxdown ssh-config install
+boxdown ssh-proxy
+boxdown refresh-gh-token
+boxdown refresh-gh-token-running
+```
+
+`boxdown shell` remains supported as an alias for `boxdown start`, but
+documentation uses `start` as the canonical command.
+
+The coding-agent commands start or reuse the devcontainer, refresh the selected
+CLI, then launch it directly inside the container. Use `--` to pass arguments to
+the agent:
+
+```sh
+boxdown claude -- --continue
+```
+
+List Boxdown-known devcontainer environments from any directory:
+
+```sh
+boxdown list
+boxdown list --json
+```
+
+Shared options:
+
+```sh
+--workspace <path>  # target project directory, defaults to cwd
+--alias <name>      # SSH alias, defaults to <repo-name>-devcontainer
+--recreate          # recreate the devcontainer before starting
+--json              # JSON output for status and list
+```
+
+## Contributing
+
+Please consult [CONTRIBUTING](./CONTRIBUTING.md) for guidelines on contributing to this project.
+
+## Author
+
+**boxdown** © [Liran Tal](https://github.com/lirantal), Released under the [Apache-2.0](./LICENSE) License.

package/assets/devcontainer/README.md

@@ -0,0 +1,177 @@
+# Dev container
+
+Run this project in a **consistent Node.js 24 + TypeScript** environment without installing toolchains on your machine. Dependencies install automatically; your repo is the workspace inside the container.
+
+## Why use it?
+
+- **Same stack for everyone** — Node 24, pnpm, and tooling match CI and collaborators.
+- **Fast onboarding** — Open the folder in a container; `pnpm install` and local git tweaks run once after create.
+- **Host secrets, container dev** — `ANTHROPIC_API_KEY` and `SNYK_TOKEN` are passed from your Mac/Linux session into the container when set locally (see below).
+- **Optional CLI workflow** — Use `start.sh` if you prefer a terminal-driven container instead of only the editor.
+- **Portless SSH workflow** — Install a normal SSH host alias that proxies into the devcontainer without publishing an SSH port.
+
+## What’s here
+
+| File | Role |
+| ---- | ---- |
+| `devcontainer.json` | Image, mounts (e.g. your `~/.gitconfig`), lifecycle commands, env forwarding. |
+| `start.sh` | Brings the dev container up with the Dev Containers CLI, then opens a shell **inside** the container or acts as an SSH `ProxyCommand`. |
+| `ssh-config-install.sh` | Installs/updates a host SSH config alias for Cursor, Claude, or plain `ssh`. |
+| `hooks/initialize.sh` | Runs on the host before container create/start; prepares the env file and optional secrets. |
+| `hooks/post-create.sh` | Runs once after the container is created — e.g. installs [APM](https://github.com/microsoft/apm) (Agent Package Manager), coding-agent CLIs, and OpenSSH server. |
+| `hooks/post-start.sh` | Runs on each container start; refreshes runtime state such as SSH host keys and authorized keys. |
+| `utils/ssh-bootstrap.sh` | Container-side OpenSSH install/runtime helper used by lifecycle scripts. |
+| `utils/coding-agent-cli-update.sh` | Shared install/update helper for Codex, OpenCode, Claude Code, and Antigravity CLI. |
+| `utils/deps-install.sh` | Dependency installation helper used by `hooks/post-create.sh`. |
+
+## Usage
+
+### Editor (recommended)
+
+1. Install the **Dev Containers** extension (VS Code) or use Cursor’s dev container support.
+2. **Command Palette** → *Dev Containers: Reopen in Container* (or *Rebuild Container* after config changes).
+3. Wait for create/start; the editor attaches when ready.
+
+### Terminal only
+
+From the **repository root** on your host:
+
+```bash
+bash .devcontainer/start.sh
+```
+
+Requires Docker running. The script resolves Boxdown's packaged `@devcontainers/cli` dependency and uses that binary to `up` the workspace and `exec` into `bash`; it does not install or use a host/global Dev Containers CLI package.
+
+### GitHub CLI auth from host `gh`
+
+If your host machine is already authenticated with the GitHub CLI, refresh the container's
+GitHub CLI auth from the host token:
+
+```bash
+bash .devcontainer/start.sh --refresh-gh-token
+```
+
+This starts or reuses the dev container, reads the host token with:
+
+```bash
+gh auth token
+```
+
+and stores it using the container's own `gh auth login --with-token` flow. After that,
+`gh` commands inside the container can use the normal GitHub CLI auth store without
+sourcing an environment file:
+
+```bash
+gh auth status
+gh pr status
+```
+
+The refresh also configures this repository's local Git config so GitHub remotes
+use HTTPS and ask the container's `gh` for credentials during `git fetch`,
+`git pull`, and `git push`. This is intentionally tied to the explicit refresh
+command; regular SSH remote connections do not copy GitHub credentials.
+
+If your host `.gitconfig` is mounted into the container, Boxdown adds local
+repository settings that neutralize incompatible host-only helpers such as
+`/opt/homebrew/bin/gh` and broad rewrites such as
+`url.git@github.com:.insteadOf=https://github.com/`.
+
+If the container is already running and you only want to refresh its GitHub auth:
+
+```bash
+bash .devcontainer/start.sh --refresh-gh-token-running
+```
+
+The refresh is intentionally non-interactive. It does not start a browser login or ask
+for a device code. If host `gh` is missing, logged out, or cannot return a token, the
+refresh is skipped so container startup is not blocked. Run `gh auth login` on the host
+first when you need to repair host GitHub auth.
+
+### Portless SSH alias
+
+From the **repository root** on your host, install or update the SSH alias:
+
+```bash
+bash .devcontainer/start.sh ssh-config install
+```
+
+By default, this creates:
+
+- A repo-local SSH identity at `.devcontainer/.ssh/id_ed25519`.
+- A marked `Host <repo-name>-devcontainer` block in `~/.ssh/config`, where `<repo-name>` is the local repository directory name.
+- A `ProxyCommand` that runs `.devcontainer/start.sh --ssh-proxy`.
+
+Validate with plain OpenSSH first:
+
+```bash
+ssh <repo-name>-devcontainer 'whoami && pwd'
+```
+
+Then use the same host alias in Cursor, Claude, or any other SSH client:
+
+- **SSH Host:** `<repo-name>-devcontainer`
+- **SSH Port:** leave empty
+- **Identity File:** leave empty if the client reads `~/.ssh/config`; otherwise use `.devcontainer/.ssh/id_ed25519`
+- **Remote Folder:** select `<repo-name>` from the default home folder, or enter `/workspaces/<repo-name>`
+
+To customize the alias, run:
+
+```bash
+bash .devcontainer/ssh-config-install.sh --alias my-project-devcontainer
+```
+
+This workflow does not publish an SSH port. OpenSSH talks to `sshd -i` over `docker exec`, while `@devcontainers/cli up` still owns the devcontainer lifecycle. The installer is idempotent and `start.sh --ssh-proxy` quietly refreshes the generated SSH config before proxying.
+
+### Coding agents over SSH
+
+If you are a coding agent running on the host OS, prefer the SSH alias workflow. It gives Claude, Cursor, Codex, and plain OpenSSH a normal SSH host while preserving this repo's devcontainer lifecycle.
+
+From the repository root on the host:
+
+```bash
+bash .devcontainer/start.sh ssh-config install
+ssh <repo-name>-devcontainer 'whoami && pwd'
+```
+
+Use the generated host alias when configuring the agent:
+
+- **SSH Host:** `<repo-name>-devcontainer`
+- **SSH Port:** leave empty
+- **Identity File:** leave empty if the agent honors `~/.ssh/config`; otherwise use `.devcontainer/.ssh/id_ed25519`
+- **Remote Folder:** select `<repo-name>` from the default home folder, or enter `/workspaces/<repo-name>`
+
+`start.sh` has two modes:
+
+- `bash .devcontainer/start.sh` starts or reuses the devcontainer and opens an interactive shell. Use this for a local terminal session.
+- `bash .devcontainer/start.sh ssh-config install` installs or refreshes the host SSH alias and exits.
+- `bash .devcontainer/start.sh --ssh-proxy` refreshes the SSH alias, starts or reuses the devcontainer, and then bridges SSH over `docker exec`. Do not keep this running manually in a terminal; it is meant to be launched by OpenSSH as the `ProxyCommand` in the generated SSH config.
+- `bash .devcontainer/start.sh --refresh-gh-token` starts or reuses the devcontainer, then refreshes container `gh` auth from host `gh` when a token is available.
+- `bash .devcontainer/start.sh --refresh-gh-token-running` refreshes container `gh` auth from host `gh` only when the devcontainer is already running.
+
+If the devcontainer does not exist yet, the first SSH connection through `<repo-name>-devcontainer` will create it with `@devcontainers/cli up`, including `initializeCommand`, features, mounts, `postCreateCommand`, and `postStartCommand`. The first connection may take longer while the container is created.
+
+## Environment variables (host → container)
+
+Set these **on your machine** before opening/rebuilding the container so they appear inside:
+
+```bash
+export ANTHROPIC_API_KEY=sk-...
+export SNYK_TOKEN=...
+```
+
+They are wired in `devcontainer.json` under `containerEnv` via `localEnv`.
+
+If `OP_SERVICE_ACCOUNT_TOKEN` is present, it authenticates the 1Password CLI.
+It is not a GitHub token and does not authenticate `gh` or GitHub Git remotes.
+
+## Optional customization
+
+- **Global agent config** — Boxdown automatically mounts host `~/.agents`
+  read-only at `/home/node/.agents` when that directory exists. Recreate the
+  devcontainer after creating or removing it so the mount set is refreshed.
+- **Agent config on the host** — Uncomment the `mounts` entries in `devcontainer.json` to bind `~/.claude`, `~/.gemini`, or `~/.codex` into the container so coding agents see your existing settings.
+- **1Password / other CLIs** — Follow the commented blocks in `devcontainer.json` and `hooks/post-create.sh` if you need them; keep the image lean by default.
+
+---
+
+After scaffolding, edit paths and secrets to match your team’s policies; this folder is yours to extend.

package/assets/devcontainer/devcontainer.json

@@ -0,0 +1,83 @@
+{
+    "name": "Project Devcontainer",
+    "image": "mcr.microsoft.com/devcontainers/typescript-node:24-trixie",
+    "features": {
+        "ghcr.io/devcontainers/features/python@sha256:fbcad6955caeecc5ad3f7886baf652e25cba5225a6c4c2287c536de2e5607511": {
+            "version": "3.12",
+            "installPythonDevDependencies": true
+        },
+        "ghcr.io/devcontainer-community/devcontainer-features/astral.sh-uv@sha256:36f95b90080248a05aba7b1b3cecf8018bb6d7222f6274f03f050b502abd4fe7": {
+            "shellautocompletion": true
+        },
+        "ghcr.io/devcontainers-extra/features/ripgrep@sha256:0dfc0ac16f0d6aa754d006a138fd4cb4a62c245d308306edf8ad1b7a80b8fdf2": {},
+        "ghcr.io/devcontainers/features/github-cli@sha256:d22f50b70ed75339b4eed1ba9ecde3a1791f90e88d37936517e3bace0bbad671": {}
+    },
+    // Ask the editor to forward these container ports (no Docker appPort).
+    "forwardPorts": [8787, 3005, 3001, 3000],
+
+    "portsAttributes": {
+        "8787": {
+            "label": "Hono Dev Server",
+            "onAutoForward": "notify"
+        },
+        "3005": {
+            "label": "Nuxt Dev Server",
+            "onAutoForward": "notify"
+        },
+        "3001": {
+            "label": "Nuxt Preview Server",
+            "onAutoForward": "silent"
+        },
+        "3000": {
+            "label": "Published dev server",
+            "protocol": "http",
+            "onAutoForward": "notify",
+            "requireLocalPort": false
+        },
+        // only enable when running Caddy http proxy in the container
+        // "80": {
+        //     "label": "Caddy HTTP",
+        //     "onAutoForward": "notify"
+        // },
+        // "443": {
+        //     "label": "Caddy HTTPS",
+        //     "onAutoForward": "notify"
+        // }
+    },
+
+    "otherPortsAttributes": {
+        "onAutoForward": "notify",
+        "requireLocalPort": false
+    },
+
+    "mounts": [
+        "source=${localEnv:HOME}/.gitconfig,target=/home/node/.gitconfig,type=bind,consistency=cached",
+        // mount host user home directories for agents:
+        // "source=${localEnv:HOME}/.claude,target=/home/node/.claude,type=bind,consistency=cached",
+        // "source=${localEnv:HOME}/.gemini,target=/home/node/.claude,type=bind,consistency=cached",
+        // "source=${localEnv:HOME}/.codex,target=/home/node/.codex,type=bind,consistency=cached"
+    ],
+
+    // Initialize optional host-side secrets before container create/start.
+    "initializeCommand": "bash .devcontainer/hooks/initialize.sh",
+    // After up, discover the published host binding, e.g.:
+    // docker port <container-name-or-id> 3000/tcp
+    "runArgs": [
+        // publish container port 3000 with dynamic host port (CLI / start.sh)
+        "-p",
+        "127.0.0.1::3000",
+        // pass the development environment file to the container
+        "--env-file",
+        "${localWorkspaceFolder}/.env.development"
+    ],
+    // --
+    "postCreateCommand": "bash .devcontainer/hooks/post-create.sh",
+    "postStartCommand": "bash .devcontainer/hooks/post-start.sh",
+    "remoteUser": "node",
+    "workspaceFolder": "/workspaces/${localWorkspaceFolderBasename}",
+    "containerEnv": {
+        "NODE_ENV": "development",
+        "ANTHROPIC_API_KEY": "${localEnv:ANTHROPIC_API_KEY}",
+        "SNYK_TOKEN": "${localEnv:SNYK_TOKEN}"
+    }
+}

package/assets/devcontainer/hooks/initialize.sh

@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+# initialize: runs on host before container create/start (initializeCommand).
+# Prepares .env.development and, when possible, injects OP_SERVICE_ACCOUNT_TOKEN from 1Password.
+
+set -euo pipefail
+
+HOOKS_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+WORKSPACE_DIR="${BOXDOWN_WORKSPACE_FOLDER:-$(cd "${HOOKS_DIR}/../.." && pwd)}"
+ENV_FILE="${WORKSPACE_DIR}/.env.development"
+OP_TOKEN_REFERENCE="op://Private/1Password op CLI Service Account for DevContainers/password"
+
+main() {
+  ensure_env_file_exists
+  maybe_inject_1password_service_account_token
+}
+
+ensure_env_file_exists() {
+  if [[ ! -f "${ENV_FILE}" ]]; then
+    : > "${ENV_FILE}"
+  fi
+}
+
+maybe_inject_1password_service_account_token() {
+  local token
+
+  if ! command -v op >/dev/null 2>&1; then
+    echo "initialize.sh: op CLI not found; leaving ${ENV_FILE} unchanged."
+    return 0
+  fi
+
+  if ! token="$(op read "${OP_TOKEN_REFERENCE}" 2>/dev/null)"; then
+    echo "initialize.sh: could not read OP service token from 1Password; leaving ${ENV_FILE} unchanged."
+    return 0
+  fi
+
+  if [[ -z "${token}" ]]; then
+    echo "initialize.sh: OP service token is empty; leaving ${ENV_FILE} unchanged."
+    return 0
+  fi
+
+  upsert_env_var "OP_SERVICE_ACCOUNT_TOKEN" "${token}"
+}
+
+upsert_env_var() {
+  local key="$1"
+  local value="$2"
+  local tmp_file
+
+  tmp_file="$(mktemp)"
+  awk -F= -v k="${key}" '$1 != k' "${ENV_FILE}" > "${tmp_file}"
+  printf '%s=%s\n' "${key}" "${value}" >> "${tmp_file}"
+  mv "${tmp_file}" "${ENV_FILE}"
+}
+
+main "$@"