boxdown 1.2.1 → 1.3.0

package/README.md

@@ -169,6 +169,16 @@ no-start bind-mount probe for the workspace and Boxdown-managed mount paths.
 Run `boxdown doctor` directly for the complete diagnostic report; an unavailable
 best-effort mount probe is reported as a warning and does not block setup.
 
+`boxdown start` is standalone: it can create or reuse the devcontainer even if
+`boxdown setup` was skipped or its preflight failed. Setup-only SSH aliases and
+Codex/Claude application integrations are still installed only by `setup`.
+
+Before a command creates or starts a container, Boxdown waits up to 60 seconds
+for the Docker daemon and the selected Docker Buildx builder. If Buildx is not
+installed, the bundled Dev Containers CLI uses its supported classic-build
+fallback and Boxdown continues with a warning. Boxdown does not retry an actual
+Dev Containers build failure.
+
 Container bring-up installs Codex and Claude Code by default. The OpenCode and
 Antigravity commands stay available, but install/update those CLIs only when you
 launch them. Use `--` to pass arguments to the selected agent:

package/assets/devcontainer/README.md

@@ -28,7 +28,18 @@ Run this project in a **consistent Node.js 24 + TypeScript** environment without
 
 ## Base image
 
-Boxdown uses `node:24-trixie-slim` as the base image to keep the shared image smaller than the full Dev Containers TypeScript/Node image. The devcontainer then installs the required operating-system tools through pinned Dev Container features. `common-utils` and `git` run first so later features and lifecycle hooks can rely on shell basics, `sudo`, package metadata, Git, and related utilities.
+Boxdown uses `node:24-trixie-slim` as the base-image update track to keep the
+shared image smaller than the full Dev Containers TypeScript/Node image. The
+template appends the upstream multi-platform OCI index digest, making rebuilds
+immutable while allowing AMD64 and ARM64 hosts to select the matching platform
+manifest from the same pinned release set. Renovate checks the packaged
+template monthly and opens a pull request when that tag's index digest changes,
+so base-image updates remain explicit and auditable.
+
+The devcontainer then installs the required operating-system tools through
+pinned Dev Container features. `common-utils` and `git` run first so later
+features and lifecycle hooks can rely on shell basics, `sudo`, package
+metadata, Git, and related utilities.
 
 Python is installed during `postCreateCommand` from Debian apt packages (`python3`, `python3-venv`, `python3-pip`, and `pipx`). On Debian trixie this currently provides Python 3.13. Boxdown intentionally avoids the Dev Containers Python feature because it added a large Python runtime/dev-tooling layer, including bundled environments for tools such as mypy, black, pylint, pytest, bandit, pipenv, and flake8.
 

package/assets/devcontainer/devcontainer.json

@@ -1,6 +1,6 @@
 {
     "name": "Project Devcontainer",
-    "image": "node:24-trixie-slim",
+    "image": "node:24-trixie-slim@sha256:ae91dcc111a68c9d2d81ff2a17bda61be126426176fde6fe7d08ab13b7f50573",
     "features": {
         "ghcr.io/devcontainers/features/common-utils@sha256:cb0c4d3c276f157eed17935747e364178d75fee17f55c4e129966f64633deb3a": {
             "username": "node"

package/assets/devcontainer/hooks/post-create.sh

@@ -111,7 +111,18 @@ install_snyk_cli() {
 
 install_1password_cli() {
   local op_version="2.32.1"
-  curl -fsSL "https://cache.agilebits.com/dist/1P/op2/pkg/v${op_version}/op_linux_arm64_v${op_version}.zip" -o /tmp/op.zip
+  local op_arch
+
+  case "$(uname -m)" in
+    aarch64 | arm64) op_arch="arm64" ;;
+    x86_64 | amd64) op_arch="amd64" ;;
+    *)
+      echo "post-create: skipping 1Password CLI (unsupported arch: $(uname -m))" >&2
+      return 0
+      ;;
+  esac
+
+  curl -fsSL "https://cache.agilebits.com/dist/1P/op2/pkg/v${op_version}/op_linux_${op_arch}_v${op_version}.zip" -o /tmp/op.zip
   python3 -c "import zipfile; zipfile.ZipFile('/tmp/op.zip').extract('op', '/tmp')"
   sudo mv /tmp/op /usr/local/bin/op && chmod +x /usr/local/bin/op && rm /tmp/op.zip
 }

package/dist/bin/cli.cjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-const require_main = require('../main-BDgyf2t5.cjs');
+const require_main = require('../main-CT2n9qcb.cjs');
 
 //#region src/bin/cli.ts
 require_main.runCli().then((exitCode) => {

package/dist/bin/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { o as runCli } from "../main-J4_2Up3o.mjs";
+import { c as runCli } from "../main-O__JaiXe.mjs";
 
 //#region src/bin/cli.ts
 runCli().then((exitCode) => {