boxdown 1.2.0 → 1.2.1

package/dist/{main-XMBsKjIK.mjs → main-J4_2Up3o.mjs}

@@ -1,7 +1,7 @@
 import { createRequire } from "node:module";
 import { appendFileSync, chmodSync, copyFileSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { createHash, randomUUID } from "node:crypto";
-import { homedir } from "node:os";
+import { homedir, tmpdir } from "node:os";
 import { basename, delimiter, dirname, isAbsolute, join, parse, relative, resolve } from "node:path";
 import { spawn } from "node:child_process";
 import { createInterface } from "node:readline";
@@ -10,7 +10,7 @@ import { fileURLToPath } from "node:url";
 //#region src/claude-app-config.ts
 const CLAUDE_APP_SUPPORT_DIRNAME = "Claude";
 const CLAUDE_SSH_CONFIGS_FILENAME = "ssh_configs.json";
-function isRecord$2(value) {
+function isRecord$1(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function parseRequiredString(value, key) {
@@ -43,7 +43,7 @@ function parseStringArray(value, key) {
 	});
 }
 function parseClaudeSshConfigEntry(value) {
-	if (!isRecord$2(value)) {
+	if (!isRecord$1(value)) {
 		throw new Error("Invalid Claude SSH config: configs entries must be objects");
 	}
 	const source = parseOptionalString(value.source, "source");
@@ -61,7 +61,7 @@ function parseClaudeSshConfigEntry(value) {
 	return parsed;
 }
 function parseClaudeSshConfigs(value) {
-	if (!isRecord$2(value)) {
+	if (!isRecord$1(value)) {
 		throw new Error("Invalid Claude SSH config: top-level value must be an object");
 	}
 	const configs = value.configs;
@@ -217,7 +217,7 @@ const CODEX_APP_CONFIG_VERSION = 1;
 const CODEX_APP_CONFIG_DIRNAME = "codex-app";
 const CODEX_APP_CONFIG_FILENAME = "config.json";
 const CODEX_GLOBAL_STATE_FILENAME = ".codex-global-state.json";
-function isRecord$1(value) {
+function isRecord(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function parseOptionalNonnegativeInteger(value, key) {
@@ -239,7 +239,7 @@ function parseOptionalLabel(value) {
 	return value;
 }
 function parseProjectConfig(value) {
-	if (!isRecord$1(value)) {
+	if (!isRecord(value)) {
 		throw new Error("Invalid Codex app config: project entries must be objects");
 	}
 	const remotePath = value.remotePath;
@@ -253,7 +253,7 @@ function parseProjectConfig(value) {
 	};
 }
 function parseRemoteConnectionConfig(value) {
-	if (!isRecord$1(value)) {
+	if (!isRecord(value)) {
 		throw new Error("Invalid Codex app config: remoteConnections entries must be objects");
 	}
 	const sshAlias = value.sshAlias;
@@ -270,7 +270,7 @@ function parseRemoteConnectionConfig(value) {
 	};
 }
 function parseCodexAppConfig(value) {
-	if (!isRecord$1(value)) {
+	if (!isRecord(value)) {
 		throw new Error("Invalid Codex app config: top-level value must be an object");
 	}
 	const version = value.version;
@@ -397,7 +397,7 @@ function cloneJsonObject(value) {
 	return JSON.parse(JSON.stringify(value));
 }
 function removeObjectKey(value, key) {
-	if (isRecord$1(value)) {
+	if (isRecord(value)) {
 		delete value[key];
 	}
 }
@@ -417,7 +417,7 @@ function cleanupCodexStateContainer(container, hostId, remotePaths) {
 	const remoteProjects = container["remote-projects"];
 	if (Array.isArray(remoteProjects)) {
 		container["remote-projects"] = remoteProjects.filter((project) => {
-			if (!isRecord$1(project)) {
+			if (!isRecord(project)) {
 				return true;
 			}
 			const matches = project.hostId === hostId && typeof project.remotePath === "string" && remotePaths.has(normalizeRemotePath(project.remotePath));
@@ -429,7 +429,7 @@ function cleanupCodexStateContainer(container, hostId, remotePaths) {
 	}
 	const managedConnections = container["codex-managed-remote-connections"];
 	if (Array.isArray(managedConnections)) {
-		container["codex-managed-remote-connections"] = managedConnections.filter((connection) => !isRecord$1(connection) || connection.hostId !== hostId);
+		container["codex-managed-remote-connections"] = managedConnections.filter((connection) => !isRecord(connection) || connection.hostId !== hostId);
 	}
 	for (const key of [
 		"remote-connection-analytics-id-by-host-id",
@@ -453,7 +453,7 @@ function cleanupProjectReferences(state, atomState, removedProjectIds) {
 	for (const projectId of removedProjectIds) {
 		removeObjectKey(state["sidebar-collapsed-groups"], projectId);
 	}
-	if (isRecord$1(atomState)) {
+	if (isRecord(atomState)) {
 		cleanupStringArrayField(atomState, "project-order", removedProjectIds);
 		for (const projectId of removedProjectIds) {
 			removeObjectKey(atomState["sidebar-collapsed-groups"], projectId);
@@ -466,7 +466,7 @@ function removeCodexGlobalStateProject(state, entry, options = {}) {
 	const nextState = cloneJsonObject(state);
 	const removedProjectIds = cleanupCodexStateContainer(nextState, hostId, remotePaths);
 	const atomState = nextState["electron-persisted-atom-state"];
-	if (isRecord$1(atomState)) {
+	if (isRecord(atomState)) {
 		for (const projectId of cleanupCodexStateContainer(atomState, hostId, remotePaths)) {
 			removedProjectIds.add(projectId);
 		}
@@ -482,7 +482,7 @@ function normalizeCodexStateContainer(container, hostId, canonicalRemotePath, le
 	}
 	let matchedProject = false;
 	container["remote-projects"] = remoteProjects.flatMap((project) => {
-		if (!isRecord$1(project) || project.hostId !== hostId || typeof project.remotePath !== "string") {
+		if (!isRecord(project) || project.hostId !== hostId || typeof project.remotePath !== "string") {
 			return [project];
 		}
 		const remotePath = normalizeRemotePath(project.remotePath);
@@ -510,7 +510,7 @@ function normalizeCodexGlobalStateProject(state, entry, options = {}) {
 	const nextState = cloneJsonObject(state);
 	const removedProjectIds = normalizeCodexStateContainer(nextState, hostId, canonicalRemotePath, legacyRemotePaths);
 	const atomState = nextState["electron-persisted-atom-state"];
-	if (isRecord$1(atomState)) {
+	if (isRecord(atomState)) {
 		for (const projectId of normalizeCodexStateContainer(atomState, hostId, canonicalRemotePath, legacyRemotePaths)) {
 			removedProjectIds.add(projectId);
 		}
@@ -608,7 +608,7 @@ function uninstallCodexGlobalStateProject(entry, options = {}) {
 	}
 	const existingJson = readFileSync(statePath, "utf8");
 	const existingState = JSON.parse(existingJson);
-	if (!isRecord$1(existingState)) {
+	if (!isRecord(existingState)) {
 		throw new Error(`Invalid Codex global state JSON: ${statePath}`);
 	}
 	const nextState = removeCodexGlobalStateProject(existingState, entry, { additionalRemotePaths: options.additionalRemotePaths });
@@ -638,7 +638,7 @@ function installCodexGlobalStateProject(entry, options = {}) {
 	}
 	const existingJson = readFileSync(statePath, "utf8");
 	const existingState = JSON.parse(existingJson);
-	if (!isRecord$1(existingState)) {
+	if (!isRecord(existingState)) {
 		throw new Error(`Invalid Codex global state JSON: ${statePath}`);
 	}
 	const nextState = normalizeCodexGlobalStateProject(existingState, entry, { legacyRemotePaths: options.legacyRemotePaths });
@@ -691,6 +691,13 @@ const BOXDOWN_CONTAINER_AGENTS_DIR = "/home/node/.agents";
 const BOXDOWN_CONTAINER_GITCONFIG_PATH = "/home/node/.gitconfig";
 const BOXDOWN_CONTAINER_CODEX_DIR = "/home/node/.codex";
 const BOXDOWN_CONTAINER_CODEX_AUTH_PATH = `${BOXDOWN_CONTAINER_CODEX_DIR}/auth.json`;
+const BOXDOWN_CONTAINER_SECRET_ENV_DIR = "/run/boxdown/secrets";
+const BOXDOWN_CONTAINER_SECRET_ENV_BOOTSTRAP = `${BOXDOWN_CONTAINER_DEVCONTAINER_DIR}/utils/secret-env-bootstrap.sh`;
+const BOXDOWN_SECRET_ENV_NAMES = [
+	"ANTHROPIC_API_KEY",
+	"SNYK_TOKEN",
+	"OP_SERVICE_ACCOUNT_TOKEN"
+];
 const PACKAGE_NAME = "boxdown";
 
 //#endregion
@@ -844,10 +851,14 @@ function interactiveTermSetupScript() {
 function interactiveAgentPathScript() {
 	return ["codex_home=\"${CODEX_HOME:-${HOME}/.codex}\"", "export PATH=\"${HOME}/.local/bin:${HOME}/.opencode/bin:${codex_home}/packages/standalone/current/bin:${PATH}\""].join("\n");
 }
+function runtimeSecretEnvironmentScript() {
+	return "source \"${BASH_ENV:-/opt/boxdown/devcontainer/utils/secret-env-bootstrap.sh}\"";
+}
 function interactiveShellScript() {
 	return [
 		interactiveTermSetupScript(),
 		interactiveTtySetupScript(),
+		runtimeSecretEnvironmentScript(),
 		"exec bash -i"
 	].join("\n");
 }
@@ -856,6 +867,7 @@ function interactiveCommandScript() {
 		interactiveTermSetupScript(),
 		interactiveTtySetupScript(),
 		interactiveAgentPathScript(),
+		runtimeSecretEnvironmentScript(),
 		"exec \"$@\""
 	].join("\n");
 }
@@ -892,7 +904,8 @@ function buildGeneratedDevcontainerConfig(context, signing) {
 	const boxdownMounts = [
 		`type=bind,source=${context.assetsDevcontainerDir},target=${BOXDOWN_CONTAINER_DEVCONTAINER_DIR},readonly`,
 		`type=bind,source=${context.sshPublicKeyRuntimeDir},target=${BOXDOWN_CONTAINER_SSH_DIR},readonly`,
-		`type=bind,source=${context.hostGitconfigSnapshotDir},target=${BOXDOWN_CONTAINER_HOST_GITCONFIG_DIR},readonly`
+		`type=bind,source=${context.hostGitconfigSnapshotDir},target=${BOXDOWN_CONTAINER_HOST_GITCONFIG_DIR},readonly`,
+		`type=bind,source=${context.workspaceSecretEnvDir},target=${BOXDOWN_CONTAINER_SECRET_ENV_DIR},readonly`
 	];
 	if (directoryExists(context.hostAgentsDir) && !hasMountTarget(mounts, "/home/node/.agents")) {
 		boxdownMounts.push(`type=bind,source=${context.hostAgentsDir},target=${BOXDOWN_CONTAINER_AGENTS_DIR},readonly`);
@@ -912,6 +925,7 @@ function buildGeneratedDevcontainerConfig(context, signing) {
 			`BOXDOWN_WORKSPACE_FOLDER=${shellQuote(context.workspaceFolder)}`,
 			`BOXDOWN_HOST_GITCONFIG_PATH=${shellQuote(context.hostGitconfigPath)}`,
 			`BOXDOWN_HOST_GITCONFIG_SNAPSHOT_PATH=${shellQuote(context.hostGitconfigSnapshotPath)}`,
+			`BOXDOWN_SECRET_ENV_DIR=${shellQuote(context.workspaceSecretEnvDir)}`,
 			`BOXDOWN_PROGRESS=${shellQuote("${localEnv:BOXDOWN_PROGRESS}")}`,
 			`BOXDOWN_VERBOSE=${shellQuote("${localEnv:BOXDOWN_VERBOSE}")}`,
 			"bash",
@@ -933,10 +947,16 @@ function buildGeneratedDevcontainerConfig(context, signing) {
 			...baseConfig.containerEnv ?? {},
 			BOXDOWN_CONTAINER_WORKSPACE_FOLDER: "/workspaces/${localWorkspaceFolderBasename}",
 			BOXDOWN_WORKSPACE_BASENAME: "${localWorkspaceFolderBasename}",
+			BOXDOWN_SECRET_ENV_DIR: BOXDOWN_CONTAINER_SECRET_ENV_DIR,
+			BASH_ENV: BOXDOWN_CONTAINER_SECRET_ENV_BOOTSTRAP,
 			DEVCONTAINER_SSH_PUBLIC_KEY_FILE: BOXDOWN_CONTAINER_SSH_PUBLIC_KEY_PATH,
 			BOXDOWN_GIT_SIGNING_ENABLED: signing?.enabled === true ? "1" : "0",
 			BOXDOWN_GIT_SIGNING_KEY_PATH: "/opt/boxdown/state/git-signing/signing-key.pub",
-			...signing?.enabled === true ? { SSH_AUTH_SOCK: "/run/boxdown/ssh-agent.sock" } : {}
+			...signing?.enabled === false && signing.reason !== undefined ? { BOXDOWN_GIT_SIGNING_REASON: signing.reason } : {},
+			...signing?.enabled === true ? {
+				BOXDOWN_GIT_SIGNING_SOURCE_SOCKET: "/run/boxdown/ssh-agent.sock",
+				SSH_AUTH_SOCK: "/run/boxdown/ssh-agent-node.sock"
+			} : {}
 		}
 	};
 }
@@ -1116,6 +1136,246 @@ function runInteractive(command, args, options = {}) {
 	});
 }
 
+//#endregion
+//#region src/git-signing.ts
+const GIT_SIGNING_REASON_MESSAGES = {
+	"agent-unavailable": "the host SSH agent is unavailable",
+	"no-identities": "the host SSH agent has no loaded identities",
+	"ambiguous-identities": "multiple SSH identities are loaded and no signing key could be selected safely",
+	"configured-key-unreadable": "the configured SSH signing-key file could not be read",
+	"configured-key-invalid": "the configured SSH signing key is not a valid public key",
+	"configured-key-not-loaded": "the configured SSH signing key is not loaded in the agent",
+	"agent-socket-unavailable": "the host SSH-agent socket is unavailable",
+	"docker-probe-image-unavailable": "no local Docker image is available to probe the SSH-agent mount",
+	"agent-mount-unavailable": "Docker could not mount the host SSH-agent socket"
+};
+function compactDiagnosticDetail(detail) {
+	return detail.trim().replace(/\s+/gu, " ").slice(0, 2e3).replace(/-----BEGIN [^-]*PRIVATE KEY-----.*?(?:-----END [^-]*PRIVATE KEY-----|$)/giu, "[redacted-private-key]").replace(/\b(?:ssh-[A-Za-z0-9-]+|ecdsa-sha2-[A-Za-z0-9-]+|sk-(?:ssh-[A-Za-z0-9-]+|ecdsa-sha2-[A-Za-z0-9-]+))\s+[A-Za-z0-9+/=]{16,}/gu, "[redacted-ssh-key]").replace(/\b(?:github_pat_|gh[pousr]_|glpat-|xox[baprs]-)[A-Za-z0-9_-]{8,}/gu, "[redacted-token]").replace(/\b(?:Bearer\s+|token[=:]\s*)[A-Za-z0-9._~+/-]{8,}/giu, "[redacted-token]").slice(0, 300);
+}
+function reportGitSigningPlan(plan, options = {}) {
+	if (plan.enabled) return;
+	const reason = plan.reason ?? "agent-unavailable";
+	const detail = plan.detail === undefined ? "" : ` detail=${compactDiagnosticDetail(plan.detail)}`;
+	options.logger?.boxdown(`git-signing: enabled=false reason=${reason}${detail}\n`);
+	if (options.quiet !== true) {
+		const writeWarning = options.writeWarning ?? ((message) => process.stderr.write(message));
+		writeWarning(`boxdown: commit signing disabled: ${GIT_SIGNING_REASON_MESSAGES[reason]}; commits will remain unsigned.\n`);
+	}
+}
+function parseSshPublicKey(value) {
+	const [algorithm, key] = value.trim().split(/\s+/, 3);
+	if (algorithm === undefined || key === undefined || !/^ssh-[A-Za-z0-9-]+$/.test(algorithm) || key.length === 0) {
+		return undefined;
+	}
+	return `${algorithm} ${key}`;
+}
+function resolveConfiguredSshSigningKey(value, options) {
+	const inlineValue = value.startsWith("key::") ? value.slice("key::".length) : value;
+	const inlineKey = parseSshPublicKey(inlineValue);
+	if (inlineKey !== undefined) {
+		return { key: inlineKey };
+	}
+	if (value.startsWith("key::")) {
+		return {
+			reason: "configured-key-invalid",
+			detail: "configured inline value is not a valid SSH public key"
+		};
+	}
+	let keyPath;
+	if (value.startsWith("~/")) {
+		if (options.homeDir === undefined) {
+			return {
+				reason: "configured-key-unreadable",
+				detail: "configured public-key file could not be read"
+			};
+		}
+		keyPath = join(options.homeDir, value.slice(2));
+	} else {
+		keyPath = isAbsolute(value) ? value : resolve(options.workspaceFolder, value);
+	}
+	let publicKeyText;
+	try {
+		publicKeyText = readFileSync(keyPath, "utf8");
+	} catch {
+		return {
+			reason: "configured-key-unreadable",
+			detail: "configured public-key file could not be read"
+		};
+	}
+	const publicKey = parseSshPublicKey(publicKeyText.split(/\r?\n/u).find((line) => line.trim().length > 0) ?? "");
+	return publicKey === undefined ? {
+		reason: "configured-key-invalid",
+		detail: "configured public-key file does not contain a valid SSH public key"
+	} : { key: publicKey };
+}
+function selectGitSigningKey(identities, configuredKey, githubKeys) {
+	const keys = identities.map(parseSshPublicKey).filter((key) => key !== undefined);
+	if (keys.length === 0) return { reason: "no-identities" };
+	const configured = configuredKey === undefined ? undefined : parseSshPublicKey(configuredKey);
+	if (configuredKey !== undefined && configured === undefined) {
+		return { reason: "configured-key-invalid" };
+	}
+	if (configured !== undefined) {
+		return keys.includes(configured) ? { key: configured } : { reason: "configured-key-not-loaded" };
+	}
+	const github = new Set((githubKeys ?? []).map(parseSshPublicKey).filter((key) => key !== undefined));
+	const matches = keys.filter((key) => github.has(key));
+	if (matches.length === 1) return { key: matches[0] };
+	if (keys.length === 1) return { key: keys[0] };
+	return { reason: "ambiguous-identities" };
+}
+function writeGitSigningPublicKey(context, key) {
+	mkdirSync(context.gitSigningStateDir, {
+		recursive: true,
+		mode: 448
+	});
+	writeFileSync(join(context.gitSigningStateDir, "signing-key.pub"), `${parseSshPublicKey(key) ?? key}\n`, { mode: 420 });
+}
+async function runGitSigningCommand(command, args) {
+	return runBuffered(command, args, {
+		mirrorStdout: false,
+		mirrorStderr: false
+	});
+}
+function failedCommandDetail(label, result) {
+	const stderr = compactDiagnosticDetail(result.stderr);
+	return stderr.length === 0 ? `${label} failed with exit code ${result.code}` : `${label} failed with exit code ${result.code}: ${stderr}`;
+}
+async function probeDockerAgentMount(source, runCommand) {
+	const images = await runCommand("docker", [
+		"image",
+		"ls",
+		"--format",
+		"{{.Repository}}:{{.Tag}}"
+	]);
+	const image = images.stdout.split(/\r?\n/).map((value) => value.trim()).find((value) => value.length > 0 && value !== "<none>:<none>");
+	if (images.code !== 0) {
+		return {
+			ok: false,
+			reason: "agent-mount-unavailable",
+			detail: failedCommandDetail("Docker image listing", images)
+		};
+	}
+	if (image === undefined) {
+		return {
+			ok: false,
+			reason: "docker-probe-image-unavailable",
+			detail: "no tagged local Docker image was found"
+		};
+	}
+	const created = await runCommand("docker", [
+		"create",
+		"--pull=never",
+		"--entrypoint",
+		"/bin/true",
+		"--mount",
+		`type=bind,source=${source},target=/run/boxdown/ssh-agent.sock`,
+		image
+	]);
+	const containerId = created.stdout.trim().split(/\r?\n/)[0];
+	if (created.code !== 0 || containerId === undefined || containerId.length === 0) {
+		return {
+			ok: false,
+			reason: "agent-mount-unavailable",
+			detail: failedCommandDetail("Docker SSH-agent mount probe", created)
+		};
+	}
+	await runCommand("docker", [
+		"rm",
+		"-f",
+		containerId
+	]);
+	return { ok: true };
+}
+async function resolveGitSigningPlan(context, options = {}) {
+	const runCommand = options.runCommand ?? runGitSigningCommand;
+	const result = await runCommand("ssh-add", ["-L"]);
+	if (result.code !== 0) {
+		return {
+			enabled: false,
+			reason: "agent-unavailable",
+			detail: failedCommandDetail("ssh-add -L", result)
+		};
+	}
+	const identities = result.stdout.split(/\r?\n/);
+	const format = await runCommand("git", [
+		"config",
+		"--global",
+		"--get",
+		"gpg.format"
+	]);
+	let configuredKey;
+	if (format.code === 0 && format.stdout.trim() === "ssh") {
+		const signingKey = await runCommand("git", [
+			"config",
+			"--global",
+			"--get",
+			"user.signingkey"
+		]);
+		if (signingKey.code === 0 && signingKey.stdout.trim().length > 0) {
+			const resolvedKey = resolveConfiguredSshSigningKey(signingKey.stdout.trim(), {
+				homeDir: options.env?.HOME ?? process.env.HOME,
+				workspaceFolder: context.workspaceFolder
+			});
+			if (resolvedKey.key === undefined) {
+				return {
+					enabled: false,
+					reason: resolvedKey.reason ?? "configured-key-invalid",
+					detail: resolvedKey.detail
+				};
+			}
+			configuredKey = resolvedKey.key;
+		}
+	}
+	let githubKeys;
+	if (configuredKey === undefined && identities.filter((key) => parseSshPublicKey(key) !== undefined).length > 1) {
+		const user = await runCommand("gh", [
+			"api",
+			"user",
+			"--jq",
+			".login"
+		]);
+		const login = user.stdout.trim();
+		if (user.code === 0 && login.length > 0) {
+			const github = await runCommand("gh", [
+				"api",
+				`users/${login}/keys`,
+				"--paginate",
+				"--jq",
+				".[].key"
+			]);
+			if (github.code === 0) githubKeys = github.stdout.split(/\r?\n/);
+		}
+	}
+	const selected = selectGitSigningKey(identities, configuredKey, githubKeys);
+	if (selected.key === undefined) return {
+		enabled: false,
+		reason: selected.reason
+	};
+	const agentSocketSource = (options.platform ?? process.platform) === "darwin" ? "/run/host-services/ssh-auth.sock" : options.env?.SSH_AUTH_SOCK ?? process.env.SSH_AUTH_SOCK;
+	if (agentSocketSource === undefined || agentSocketSource.length === 0) {
+		return {
+			enabled: false,
+			reason: "agent-socket-unavailable",
+			detail: "SSH_AUTH_SOCK is not set"
+		};
+	}
+	const mountProbe = await probeDockerAgentMount(agentSocketSource, runCommand);
+	if (!mountProbe.ok) {
+		return {
+			enabled: false,
+			reason: mountProbe.reason,
+			detail: mountProbe.detail
+		};
+	}
+	writeGitSigningPublicKey(context, selected.key);
+	return {
+		enabled: true,
+		publicKey: selected.key,
+		agentSocketSource
+	};
+}
+
 //#endregion
 //#region src/doctor.ts
 function nodeVersionPasses(version) {
@@ -1129,6 +1389,26 @@ function check(name, pass, okMessage, failMessage) {
 		message: pass ? okMessage : failMessage
 	};
 }
+function secretEnvironmentConfigCheck(context) {
+	let config;
+	try {
+		config = existsSync(context.generatedConfigPath) ? JSON.parse(readFileSync(context.generatedConfigPath, "utf8")) : buildGeneratedDevcontainerConfig(context);
+	} catch {
+		return {
+			name: "secret-environment-config",
+			level: "warn",
+			message: "Generated config could not be checked for secret-safe environment handling"
+		};
+	}
+	const runArgs = Array.isArray(config.runArgs) ? config.runArgs : [];
+	const containerEnv = config.containerEnv ?? {};
+	const unsafe = runArgs.includes("--env-file") || runArgs.some((arg) => arg.includes(".env.development")) || BOXDOWN_SECRET_ENV_NAMES.some((name) => Object.hasOwn(containerEnv, name));
+	return {
+		name: "secret-environment-config",
+		level: unsafe ? "warn" : "ok",
+		message: unsafe ? "Generated config still exposes Boxdown secrets through Docker environment settings; recreate after upgrading Boxdown" : "Generated config uses runtime-mounted secrets without Docker environment values"
+	};
+}
 async function runDoctorCommand(command, args) {
 	return runBuffered(command, args, {
 		mirrorStdout: false,
@@ -1149,11 +1429,91 @@ async function runDoctorChecks(context, options = {}) {
 	const nodeVersion = process.versions.node;
 	checks.push(check("node", nodeVersionPasses(nodeVersion), `Node ${nodeVersion}`, `Node ${nodeVersion}; expected >=24.0.0`));
 	const sshAgent = await runCommand("ssh-add", ["-L"]);
-	const identities = sshAgent.code === 0 ? sshAgent.stdout.split(/\r?\n/).filter((line) => line.trim().startsWith("ssh-")).length : 0;
+	const identityLines = sshAgent.code === 0 ? sshAgent.stdout.split(/\r?\n/).filter((line) => line.trim().startsWith("ssh-")) : [];
+	const identities = identityLines.length;
+	let configuredKey;
+	let configuredFailure;
+	const format = await runCommand("git", [
+		"config",
+		"--global",
+		"--get",
+		"gpg.format"
+	]);
+	if (format.code === 0 && format.stdout.trim() === "ssh") {
+		const signingKey = await runCommand("git", [
+			"config",
+			"--global",
+			"--get",
+			"user.signingkey"
+		]);
+		if (signingKey.code === 0 && signingKey.stdout.trim().length > 0) {
+			const resolved = resolveConfiguredSshSigningKey(signingKey.stdout.trim(), {
+				homeDir: dirname(context.hostGitconfigPath),
+				workspaceFolder: context.workspaceFolder
+			});
+			if (resolved.key === undefined) {
+				configuredFailure = {
+					reason: resolved.reason ?? "configured-key-invalid",
+					detail: resolved.detail
+				};
+			} else {
+				configuredKey = resolved.key;
+			}
+		}
+	}
+	const includeOptional = options.includeOptional ?? true;
+	let ghAvailable = false;
+	let ghAuth = false;
+	let githubLogin;
+	let githubAuthKeys;
+	if (includeOptional) {
+		ghAvailable = await commandWorks(runCommand, "gh", ["--version"]);
+		if (ghAvailable) {
+			ghAuth = await commandWorks(runCommand, "gh", [
+				"auth",
+				"status",
+				"--hostname",
+				"github.com"
+			]);
+			if (ghAuth && configuredKey === undefined && configuredFailure === undefined && identities > 1) {
+				const user = await runCommand("gh", [
+					"api",
+					"user",
+					"--jq",
+					".login"
+				]);
+				githubLogin = user.code === 0 && user.stdout.trim().length > 0 ? user.stdout.trim() : undefined;
+				if (githubLogin !== undefined) {
+					const authentication = await runCommand("gh", [
+						"api",
+						`users/${githubLogin}/keys`,
+						"--paginate",
+						"--jq",
+						".[].key"
+					]);
+					if (authentication.code === 0) githubAuthKeys = authentication.stdout.split(/\r?\n/);
+				}
+			}
+		}
+	}
+	const selected = configuredFailure ?? selectGitSigningKey(identityLines, configuredKey, githubAuthKeys);
+	const selectedByConfiguration = selected.key !== undefined && configuredKey !== undefined;
+	const selectedByGithub = selected.key !== undefined && configuredKey === undefined && identities > 1;
+	const signingMessages = {
+		"agent-unavailable": "SSH agent is unavailable; Boxdown commits will remain unsigned",
+		"no-identities": "SSH agent has no identities; Boxdown commits will remain unsigned",
+		"ambiguous-identities": "SSH agent has multiple identities; Boxdown will not guess a signing key and commits will remain unsigned",
+		"configured-key-unreadable": "Configured SSH signing-key file could not be read; Boxdown commits will remain unsigned",
+		"configured-key-invalid": "Configured SSH signing key is not a valid public key; Boxdown commits will remain unsigned",
+		"configured-key-not-loaded": "Configured SSH signing key is not loaded in the agent; Boxdown commits will remain unsigned",
+		"agent-socket-unavailable": "Host SSH-agent socket is unavailable; Boxdown commits will remain unsigned",
+		"docker-probe-image-unavailable": "No local Docker image is available to probe commit-signing agent forwarding",
+		"agent-mount-unavailable": "Docker could not mount the host SSH-agent socket; Boxdown commits will remain unsigned"
+	};
 	checks.push({
 		name: "git-signing-agent",
-		level: sshAgent.code === 0 && identities === 1 ? "ok" : "warn",
-		message: sshAgent.code !== 0 ? "SSH agent is unavailable; Boxdown commits will remain unsigned" : identities === 0 ? "SSH agent has no identities; Boxdown commits will remain unsigned" : identities > 1 ? "SSH agent has multiple identities; Boxdown will not guess a signing key and commits will remain unsigned" : "One SSH agent identity is available for Boxdown commit signing"
+		level: sshAgent.code === 0 && selected.key !== undefined ? "ok" : "warn",
+		message: sshAgent.code !== 0 ? signingMessages["agent-unavailable"] : selected.key === undefined ? signingMessages[selected.reason ?? "ambiguous-identities"] : selectedByConfiguration ? "Configured SSH signing key is loaded in the agent" : selectedByGithub ? "GitHub authentication keys identify one SSH agent identity for Boxdown commit signing" : "One SSH agent identity is available for Boxdown commit signing"
 	});
 	checks.push(check("devcontainers-cli", await packagedDevcontainerCliWorks(context, runCommand), "Packaged @devcontainers/cli is available", "Packaged @devcontainers/cli is required but was not available"));
 	const dockerCliWorks = await commandWorks(runCommand, "docker", ["--version"]);
@@ -1166,29 +1526,27 @@ async function runDoctorChecks(context, options = {}) {
 	}
 	checks.push(check("ssh-keygen", await commandExists(runCommand, "ssh-keygen", ["-?"]), "ssh-keygen is available", "ssh-keygen is required but was not available"));
 	checks.push(check("assets", existsSync(context.assetsDevcontainerDir), `Devcontainer assets found at ${context.assetsDevcontainerDir}`, `Missing Boxdown devcontainer assets: ${context.assetsDevcontainerDir}`));
-	if (options.includeOptional ?? true) {
-		if (await commandWorks(runCommand, "gh", ["--version"])) {
-			const ghAuth = await commandWorks(runCommand, "gh", [
-				"auth",
-				"status",
-				"--hostname",
-				"github.com"
-			]);
+	checks.push(secretEnvironmentConfigCheck(context));
+	if (includeOptional) {
+		if (ghAvailable) {
 			checks.push({
 				name: "gh-auth",
 				level: ghAuth ? "ok" : "warn",
 				message: ghAuth ? "GitHub CLI auth is available" : "GitHub CLI is available but not authenticated"
 			});
-			if (ghAuth && identities === 1) {
-				const user = await runCommand("gh", [
-					"api",
-					"user",
-					"--jq",
-					".login"
-				]);
-				const signing = user.code === 0 && user.stdout.trim().length > 0 ? await runCommand("gh", [
+			if (ghAuth && selected.key !== undefined) {
+				if (githubLogin === undefined) {
+					const user = await runCommand("gh", [
+						"api",
+						"user",
+						"--jq",
+						".login"
+					]);
+					githubLogin = user.code === 0 && user.stdout.trim().length > 0 ? user.stdout.trim() : undefined;
+				}
+				const signing = githubLogin !== undefined ? await runCommand("gh", [
 					"api",
-					`users/${user.stdout.trim()}/ssh_signing_keys`,
+					`users/${githubLogin}/ssh_signing_keys`,
 					"--paginate",
 					"--jq",
 					".[].key"
@@ -1197,11 +1555,10 @@ async function runDoctorChecks(context, options = {}) {
 					stdout: "",
 					stderr: ""
 				};
-				const identity = sshAgent.stdout.split(/\r?\n/).find((line) => line.trim().startsWith("ssh-"))?.trim();
 				checks.push({
 					name: "git-signing-github",
-					level: signing.code === 0 && identity !== undefined && signing.stdout.includes(identity.split(/\s+/, 3).slice(0, 2).join(" ")) ? "ok" : "warn",
-					message: signing.code !== 0 ? "GitHub SSH signing-key registration could not be checked" : signing.stdout.includes(identity?.split(/\s+/, 3).slice(0, 2).join(" ") ?? "") ? "Selected SSH key is registered with GitHub for commit signing" : "Register the selected public key with GitHub as a signing key to receive Verified badges"
+					level: signing.code === 0 && signing.stdout.includes(selected.key) ? "ok" : "warn",
+					message: signing.code !== 0 ? "GitHub SSH signing-key registration could not be checked" : signing.stdout.includes(selected.key) ? "Selected SSH key is registered with GitHub for commit signing" : "Register the selected public key with GitHub as a signing key to receive Verified badges"
 				});
 			}
 		} else {
@@ -1247,6 +1604,11 @@ async function checkDockerBindMounts(context, runCommand, dockerReady) {
 	}
 	mkdirSync(context.workspaceDataDir, { recursive: true });
 	const runtimeProbeDir = mkdtempSync(join(context.workspaceDataDir, "doctor-mount-probe-"));
+	mkdirSync(context.workspaceSecretEnvDir, {
+		recursive: true,
+		mode: 448
+	});
+	chmodSync(context.workspaceSecretEnvDir, 448);
 	const sources = [
 		{
 			label: "workspace",
@@ -1259,6 +1621,10 @@ async function checkDockerBindMounts(context, runCommand, dockerReady) {
 		{
 			label: "Boxdown runtime state",
 			path: runtimeProbeDir
+		},
+		{
+			label: "Boxdown runtime secret state",
+			path: context.workspaceSecretEnvDir
 		}
 	];
 	try {
@@ -1491,147 +1857,6 @@ async function runWorkspaceGit(workspaceFolder, args) {
 	});
 }
 
-//#endregion
-//#region src/git-signing.ts
-function parseSshPublicKey(value) {
-	const [algorithm, key] = value.trim().split(/\s+/, 3);
-	if (algorithm === undefined || key === undefined || !/^ssh-[A-Za-z0-9-]+$/.test(algorithm) || key.length === 0) {
-		return undefined;
-	}
-	return `${algorithm} ${key}`;
-}
-function selectGitSigningKey(identities, configuredKey, githubKeys) {
-	const keys = identities.map(parseSshPublicKey).filter((key) => key !== undefined);
-	if (keys.length === 0) return { reason: "no-identities" };
-	const configured = configuredKey === undefined ? undefined : parseSshPublicKey(configuredKey);
-	if (configured !== undefined) {
-		return keys.includes(configured) ? { key: configured } : { reason: "configured-key-not-loaded" };
-	}
-	const github = new Set((githubKeys ?? []).map(parseSshPublicKey).filter((key) => key !== undefined));
-	const matches = keys.filter((key) => github.has(key));
-	if (matches.length === 1) return { key: matches[0] };
-	if (keys.length === 1) return { key: keys[0] };
-	return { reason: "ambiguous-identities" };
-}
-function writeGitSigningPublicKey(context, key) {
-	mkdirSync(context.gitSigningStateDir, {
-		recursive: true,
-		mode: 448
-	});
-	writeFileSync(join(context.gitSigningStateDir, "signing-key.pub"), `${parseSshPublicKey(key) ?? key}\n`, { mode: 420 });
-}
-async function dockerCanMountAgent(source) {
-	const images = await runBuffered("docker", [
-		"image",
-		"ls",
-		"--format",
-		"{{.Repository}}:{{.Tag}}"
-	], {
-		mirrorStdout: false,
-		mirrorStderr: false
-	});
-	const image = images.stdout.split(/\r?\n/).map((value) => value.trim()).find((value) => value.length > 0 && value !== "<none>:<none>");
-	if (images.code !== 0 || image === undefined) return false;
-	const created = await runBuffered("docker", [
-		"create",
-		"--pull=never",
-		"--entrypoint",
-		"/bin/true",
-		"--mount",
-		`type=bind,source=${source},target=/run/boxdown/ssh-agent.sock`,
-		image
-	], {
-		mirrorStdout: false,
-		mirrorStderr: false
-	});
-	const containerId = created.stdout.trim().split(/\r?\n/)[0];
-	if (created.code !== 0 || containerId === undefined || containerId.length === 0) return false;
-	await runBuffered("docker", [
-		"rm",
-		"-f",
-		containerId
-	], {
-		mirrorStdout: false,
-		mirrorStderr: false
-	});
-	return true;
-}
-async function resolveGitSigningPlan(context) {
-	const result = await runBuffered("ssh-add", ["-L"], {
-		mirrorStdout: false,
-		mirrorStderr: false
-	});
-	if (result.code !== 0) return {
-		enabled: false,
-		reason: "agent-unavailable"
-	};
-	const identities = result.stdout.split(/\r?\n/);
-	const format = await runBuffered("git", [
-		"config",
-		"--global",
-		"--get",
-		"gpg.format"
-	], {
-		mirrorStdout: false,
-		mirrorStderr: false
-	});
-	const configuredKey = format.code === 0 && format.stdout.trim() === "ssh" ? (await runBuffered("git", [
-		"config",
-		"--global",
-		"--get",
-		"user.signingkey"
-	], {
-		mirrorStdout: false,
-		mirrorStderr: false
-	})).stdout.trim() : undefined;
-	let githubKeys;
-	if (identities.filter((key) => parseSshPublicKey(key) !== undefined).length > 1) {
-		const user = await runBuffered("gh", [
-			"api",
-			"user",
-			"--jq",
-			".login"
-		], {
-			mirrorStdout: false,
-			mirrorStderr: false
-		});
-		const login = user.stdout.trim();
-		if (user.code === 0 && login.length > 0) {
-			const github = await runBuffered("gh", [
-				"api",
-				`users/${login}/keys`,
-				"--paginate",
-				"--jq",
-				".[].key"
-			], {
-				mirrorStdout: false,
-				mirrorStderr: false
-			});
-			if (github.code === 0) githubKeys = github.stdout.split(/\r?\n/);
-		}
-	}
-	const selected = selectGitSigningKey(identities, configuredKey, githubKeys);
-	if (selected.key === undefined) return {
-		enabled: false,
-		reason: selected.reason
-	};
-	const agentSocketSource = process.platform === "darwin" ? "/run/host-services/ssh-auth.sock" : process.env.SSH_AUTH_SOCK;
-	if (agentSocketSource === undefined || agentSocketSource.length === 0) return {
-		enabled: false,
-		reason: "agent-mount-unavailable"
-	};
-	if (!await dockerCanMountAgent(agentSocketSource)) return {
-		enabled: false,
-		reason: "agent-mount-unavailable"
-	};
-	writeGitSigningPublicKey(context, selected.key);
-	return {
-		enabled: true,
-		publicKey: selected.key,
-		agentSocketSource
-	};
-}
-
 //#endregion
 //#region src/metadata.ts
 const WORKSPACE_METADATA_VERSION = 1;
@@ -2702,34 +2927,30 @@ async function findRunningContainerId(context, options = {}) {
 	}
 	return result.stdout.split(/\r?\n/).find((line) => line.length > 0);
 }
-function isRecord(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value);
-}
 function parseDockerInspectImage(output, containerId) {
-	const trimmed = output.trim();
-	if (trimmed.length === 0) {
+	const [rawId, rawName] = output.trim().split("|");
+	if (rawId === undefined || rawId.length === 0) {
 		return undefined;
 	}
-	let parsed;
+	let id;
+	let name;
 	try {
-		parsed = JSON.parse(trimmed);
+		id = JSON.parse(rawId);
+		name = rawName === undefined || rawName.length === 0 ? undefined : JSON.parse(rawName);
 	} catch (error) {
 		throw new Error(`Could not parse docker inspect output for ${containerId}`, { cause: error });
 	}
-	if (typeof parsed.Image !== "string" || parsed.Image.length === 0) {
-		return undefined;
-	}
-	const configImage = isRecord(parsed.Config) && typeof parsed.Config.Image === "string" && parsed.Config.Image.length > 0 ? parsed.Config.Image : undefined;
+	if (typeof id !== "string" || id.length === 0) return undefined;
 	return {
-		id: parsed.Image,
-		...configImage === undefined ? {} : { name: configImage }
+		id,
+		...typeof name === "string" && name.length > 0 ? { name } : {}
 	};
 }
 async function inspectContainerImage(containerId, options = {}) {
 	const result = await runBuffered("docker", [
 		"inspect",
 		"--format",
-		"{{json .}}",
+		"{{json .Image}}|{{json .Config.Image}}",
 		containerId
 	], {
 		logger: options.logger,
@@ -2851,7 +3072,15 @@ async function startDevcontainer(context, options = {}) {
 		progress.detail(context.generatedConfigPath);
 	}
 	try {
-		writeGeneratedDevcontainerConfig(context, await resolveGitSigningPlan(context));
+		const signingPlan = await resolveGitSigningPlan(context);
+		reportGitSigningPlan(signingPlan, {
+			logger: options.logger,
+			quiet: proxyMode,
+			...progress === undefined ? {} : { writeWarning: (message) => {
+				progress.warn(message.trimEnd());
+			} }
+		});
+		writeGeneratedDevcontainerConfig(context, signingPlan);
 		if (hasConfigStep) {
 			progress?.completeStep("devcontainer-config");
 		}
@@ -3137,7 +3366,14 @@ async function refreshContainerGhAuth(context, options = {}) {
 			quiet: true,
 			progress
 		});
-		writeGeneratedDevcontainerConfig(context, await resolveGitSigningPlan(context));
+		const signingPlan = await resolveGitSigningPlan(context);
+		reportGitSigningPlan(signingPlan, {
+			logger: options.logger,
+			...progress === undefined ? {} : { writeWarning: (message) => {
+				progress.warn(message.trimEnd());
+			} }
+		});
+		writeGeneratedDevcontainerConfig(context, signingPlan);
 		if (hasConfigStep) {
 			progress?.completeStep("gh-auth-config");
 		}
@@ -3859,6 +4095,9 @@ function errorMessage$1(error) {
 function argvText(command, args) {
 	return JSON.stringify([command, ...args]);
 }
+function redactKnownSecretEnvironmentAssignments(value) {
+	return value.replace(/ANTHROPIC_API_KEY=[^\s,"\]}]+/gu, "ANTHROPIC_API_KEY=[redacted]").replace(/SNYK_TOKEN=[^\s,"\]}]+/gu, "SNYK_TOKEN=[redacted]").replace(/OP_SERVICE_ACCOUNT_TOKEN=[^\s,"\]}]+/gu, "OP_SERVICE_ACCOUNT_TOKEN=[redacted]");
+}
 var WorkspaceCommandLogger = class {
 	logPath;
 	workspaceFolder;
@@ -3909,7 +4148,7 @@ var WorkspaceCommandLogger = class {
 		return `[${this.#now().toISOString()}]`;
 	}
 	#redact(value) {
-		return this.#redactions.reduce((current, redaction) => current.replaceAll(redaction, "[redacted]"), value);
+		return this.#redactions.reduce((current, redaction) => current.replaceAll(redaction, "[redacted]"), redactKnownSecretEnvironmentAssignments(value));
 	}
 	#stream(stream, chunk) {
 		const text = this.#redact(Buffer.isBuffer(chunk) ? chunk.toString("utf8") : chunk);
@@ -3992,6 +4231,15 @@ function defaultDataRoot(env = process.env) {
 	}
 	return join(homedir(), ".local", "share", PACKAGE_NAME);
 }
+function defaultRuntimeRoot(env = process.env) {
+	if (env.BOXDOWN_RUNTIME_HOME) {
+		return env.BOXDOWN_RUNTIME_HOME;
+	}
+	if (env.XDG_RUNTIME_DIR) {
+		return join(env.XDG_RUNTIME_DIR, PACKAGE_NAME);
+	}
+	return join(tmpdir(), `${PACKAGE_NAME}-${process.getuid?.() ?? "user"}`);
+}
 function defaultHostAgentsDir(env = process.env) {
 	return join(env.HOME ?? homedir(), ".agents");
 }
@@ -4007,10 +4255,12 @@ function createWorkspaceContextFromIdentity(identity, options = {}) {
 	const assetsDevcontainerDir = options.assetsDevcontainerDir ?? env.BOXDOWN_DEVCONTAINER_ASSETS_DIR ?? join(packageRoot, "assets", "devcontainer");
 	const cacheRoot = defaultCacheRoot(env);
 	const dataRoot = defaultDataRoot(env);
+	const runtimeRoot = defaultRuntimeRoot(env);
 	const hostAgentsDir = defaultHostAgentsDir(env);
 	const hostCodexAuthPath = defaultHostCodexAuthPath(env);
 	const workspaceCacheDir = join(cacheRoot, "workspaces", identity.workspaceId);
 	const workspaceDataDir = join(dataRoot, "workspaces", identity.workspaceId);
+	const workspaceRuntimeDir = join(runtimeRoot, "workspaces", identity.workspaceId);
 	const hostGitconfigSnapshotDir = join(workspaceDataDir, "gitconfig");
 	return {
 		workspaceFolder: identity.workspaceFolder,
@@ -4020,8 +4270,11 @@ function createWorkspaceContextFromIdentity(identity, options = {}) {
 		assetsDevcontainerDir,
 		cacheRoot,
 		dataRoot,
+		runtimeRoot,
 		workspaceCacheDir,
 		workspaceDataDir,
+		workspaceRuntimeDir,
+		workspaceSecretEnvDir: join(workspaceRuntimeDir, "secrets"),
 		generatedConfigPath: join(workspaceCacheDir, "devcontainer.json"),
 		hostAgentsDir,
 		hostCodexAuthPath,
@@ -4110,6 +4363,9 @@ function removeWorkspaceStateDir(context, label, path, root) {
 	});
 	process.stdout.write(`Removed ${label}: ${path}\n`);
 }
+function removeWorkspaceRuntimeState(context) {
+	removeWorkspaceStateDir(context, "workspace runtime directory", context.workspaceRuntimeDir, context.runtimeRoot);
+}
 async function purgeAliasIntegrations(context, alias) {
 	let failed = false;
 	failed = await runPurgeStep(`SSH alias ${alias}`, () => {
@@ -4186,6 +4442,9 @@ async function purgeWorkspace(context, options = {}) {
 			await removeDockerImage(removedImageId, { logger: options.logger });
 		}) || failed;
 	}
+	failed = await runPurgeStep("workspace runtime directory", () => {
+		removeWorkspaceRuntimeState(context);
+	}) || failed;
 	failed = await runPurgeStep("workspace cache directory", () => {
 		removeWorkspaceStateDir(context, "workspace cache", context.workspaceCacheDir, context.cacheRoot);
 	}) || failed;
@@ -4891,6 +5150,7 @@ async function runDownCommand(workspaces, options) {
 			const context = createWorkspaceContext({ workspace });
 			await runLoggedLifecycle(context, "down", ["down", ...workspace === undefined ? [] : ["--workspace", workspace]], async (logger) => {
 				await removeWorkspaceContainer(context, { logger });
+				removeWorkspaceRuntimeState(context);
 			});
 		} catch (error) {
 			failed = true;
@@ -5455,4 +5715,4 @@ async function runCli(argv = process.argv.slice(2), options = {}) {
 
 //#endregion
 export { parseTunnelPortList as a, parseTunnelPort as i, commandWritesWorkspaceMetadata as n, runCli as o, parseCliArgs as r, setupWorkspace as s, USAGE as t };
-//# sourceMappingURL=main-XMBsKjIK.mjs.map
+//# sourceMappingURL=main-J4_2Up3o.mjs.map