clabox 0.2.1 → 0.3.0

package/README.md

@@ -125,7 +125,6 @@ export default {
 | `CLABOX_CONFIG` | path to the JS config file (the `--config` flag overrides it) | — |
 | `CLABOX_CONFIGS_DIR` | global dir of named boxes for `-b`/`--box <name>` (`<name>.config.mjs`) | `~/.config/clabox/configs` |
 | `CLABOX_CWD` | working dir to run `claude` in (also the RW project dir); `~` expanded | — (the shell CWD) |
-| `CLABOX_HOOKS_DIR` | hooks dir (RO + exec inside the sandbox) | — (off) |
 | `CLABOX_DEBUG` | print diagnostics on launch | — |
 | `TMPDIR` | where the generated profile is stored | `/tmp` |
 

package/clabox.config.example.mjs

@@ -40,14 +40,20 @@ export default {
   // Process-table cap inside the sandbox (fork-bomb guard); 0 to disable.
   ulimitProcs: 1024,
 
-  // Extra directory granted read + execute (e.g. shared Claude hooks).
-  hooksDir: null, // '~/some/hooks'
+  // Per-box claude hooks (claude's settings.json `hooks` map). clabox merges
+  // them into a `--settings` file. For a hook script to actually run inside the
+  // sandbox its dir must also be granted read (`paths.readOnly`) + exec
+  // (`paths.exec`) below — `hooks` only registers it with claude.
+  // hooks: {
+  //   Stop: [{ hooks: [{ type: 'command', command: '~/some/hooks/notify.sh' }] }],
+  //   Notification: [{ hooks: [{ type: 'command', command: '~/some/hooks/notify.sh' }] }],
+  // },
 
   // Extra rules layered on top of the base profile.
   paths: {
     readWrite: [], // e.g. ['~/scratch', '/Volumes/work']
-    readOnly: [], // e.g. ['~/reference-data']
-    exec: [], // e.g. ['/opt/some/tool/bin']
+    readOnly: [], // e.g. ['~/reference-data', '~/some/hooks']
+    exec: [], // e.g. ['/opt/some/tool/bin', '~/some/hooks'] (so hooks can run)
     deny: [], // e.g. ['~/secret-project']
   },
 

package/docs/guideline.md

@@ -22,7 +22,8 @@ Guidelines for clabox — run Claude Code in a sandbox for super-safe YOLO mode,
 | Size budget | size-limit | `@size-limit/preset-small-lib`, `lib/index.js` |
 | Release | semantic-release | fully automatic on push to `main` |
 | CI/CD | GitHub Actions | `macos-latest` (real `sandbox-exec`) |
-| CLI | yargs ^17 | the only runtime dependency |
+| CLI | yargs ^17 | command/flag parsing |
+| Logging | @lsk4/log ^4 | pretty leveled CLI logging (`cli.ts` only) |
 | Sandbox | macOS `sandbox-exec` (Seatbelt/SBPL) | profile generated as plain text |
 
 ## Project Structure
@@ -31,13 +32,15 @@ Guidelines for clabox — run Claude Code in a sandbox for super-safe YOLO mode,
 
 ```
 src/
-├── index.ts              # public API aggregator — re-exports config / profile / run / init
-├── cli.ts                # CLI entry (yargs): run / generate / profile / init → lib/cli.js (bin)
+├── index.ts              # public API aggregator — re-exports config / profile / run / init / info
+├── cli.ts                # CLI entry (yargs): run / generate / profile / info / init → lib/cli.js (bin)
 ├── sandbox/
 │   ├── profile.ts        # pure SBPL builder: buildProfile, detectPackagePaths,
 │   │                     #   subpath/literal/regex/globalName/ipcName/reEscape helpers
-│   ├── extras.ts         # pure: boxSlug, buildBoxExtras (per-box mcp/systemPrompt → args+files)
-│   └── run.ts            # I/O: profilePath, generateProfile, writeExtraFiles, runClaude
+│   ├── extras.ts         # pure: boxSlug, buildBoxExtras (per-box mcp/systemPrompt/hooks → args+files)
+│   └── run.ts            # I/O: profilePath, generateProfile, writeExtraFiles, runClaude, which
+├── info/
+│   └── info.ts           # pure: formatInfo;  I/O: gatherInfo, resolveClaboxPackage, claboxVersion
 ├── init/
 │   ├── aliases.ts        # pure: aliasName, buildIndex, buildWrapper, buildAliasFiles
 │   ├── ghostty.ts        # pure: buildGhosttyConfig, buildCommand, buildLauncherSource,
@@ -51,7 +54,8 @@ src/
 tests/
 ├── profile.test.ts       # bun:test — unit (profile text) + functional (real sandbox-exec)
 ├── init.test.ts          # bun:test — alias/ghostty text + scaffold & app boxes (tmp-dir fs)
-├── extras.test.ts        # bun:test — per-box mcp/systemPrompt → claude args + mcp json
+├── extras.test.ts        # bun:test — per-box mcp/systemPrompt/hooks → claude args + mcp/settings json
+├── info.test.ts          # bun:test — formatInfo text + gatherInfo/resolveClaboxPackage
 └── box.test.ts           # bun:test — named-box resolution (tmp-dir fs)
 lib/                      # build output (tsdown) — gitignored
 docs/
@@ -75,6 +79,7 @@ bun run dev                   # tsdown --watch
 # Run
 bun run cli                   # bun run src/cli.ts  (pass args after `--`)
 bun run generate              # bun run src/cli.ts generate (build a profile, print its path)
+bun run cli -- info           # version + resolved box/config/extras report (pretty via @lsk4/log)
 bun run cli -- init           # aliases per box + build Ghostty apps for `app` boxes
 bun run cli -- init --no-apps # aliases only (skip the Ghostty-app build)
 bun run cli -- init --app "AX Manager"  # (re)build just one app box
@@ -108,7 +113,7 @@ clabox run  →  loadConfig()  →  buildProfile()  →  <TMPDIR>/…sb
 ```
 
 ### `utils/config.ts`
-Builds the effective config in three layers (later wins): `defaultConfig` → env vars → a JS config file. `findConfigFile(explicit?)` looks up the explicit path (the `--config` CLI flag, falling back to `CLABOX_CONFIG`) → `./clabox.config.mjs` / `./clabox.config.js` → `~/.config/clabox/config.mjs`; the `--config` flag wins over `CLABOX_CONFIG`. `loadConfig(explicit?)` forwards that path, dynamically imports the file and accepts either a plain object (merged via `mergeConfig`, a deep merge over the defaults) or a function `(defaults) => config`. `expandHome()` expands a leading `~`. Exports the `Config`/`BotConfig`/`PathRules`/`McpServer`/`LoadedConfig` types. The `Config` carries optional `mcp` (`Record<string, McpServer>`) and `systemPrompt` (`string | string[]`) — declarative per-box MCP / pre-prompt compiled by `sandbox/extras.ts` (see below).
+Builds the effective config in three layers (later wins): `defaultConfig` → env vars → a JS config file. `findConfigFile(explicit?)` looks up the explicit path (the `--config` CLI flag, falling back to `CLABOX_CONFIG`) → `./clabox.config.mjs` / `./clabox.config.js` → `~/.config/clabox/config.mjs`; the `--config` flag wins over `CLABOX_CONFIG`. `loadConfig(explicit?)` forwards that path, dynamically imports the file and accepts either a plain object (merged via `mergeConfig`, a deep merge over the defaults) or a function `(defaults) => config`. `expandHome()` expands a leading `~`. Exports the `Config`/`BotConfig`/`PathRules`/`McpServer`/`HookCommand`/`HookMatcher`/`HooksConfig`/`LoadedConfig` types. The `Config` carries optional `mcp` (`Record<string, McpServer>`), `systemPrompt` (`string | string[]`) and `hooks` (`HooksConfig` = claude's settings.json `hooks` map) — declarative per-box MCP / pre-prompt / hooks compiled by `sandbox/extras.ts` (see below).
 
 **Named boxes.** `configsDir()` returns the global box dir (`~/.config/clabox/configs`, overridable via `CLABOX_CONFIGS_DIR`). `resolveBox(name, dir?)` maps a name to its config file there, preferring `<name>.config.mjs` over a bare `<name>.mjs` and throwing (with the available boxes listed) when none exists; a `_`-prefixed name is refused (it's a shared partial, not a box), so `-b` matches exactly what `listBoxes` advertises. `listBoxes(dir?)` returns the sorted, de-duplicated box names, skipping `_`-prefixed shared partials (e.g. `_presets.mjs`). The CLI's `-b`/`--box <name>` flag resolves the name and feeds the path to `loadConfig` as the explicit config (so `-b` wins over `--config`).
 
@@ -116,19 +121,22 @@ Builds the effective config in three layers (later wins): `defaultConfig` → en
 Assembles the SBPL profile text from typed helpers (`subpath`, `literal`, `regex`, `globalName`, `ipcName`, `reEscape`) — no I/O beyond `fs.existsSync` for autodetection. `detectPackagePaths()` finds installed package managers (Homebrew `/opt/homebrew` or `/usr/local/Homebrew`, `~/.local`, Nix `/nix/store`) to grant read/exec. `buildProfile(config, { projectDir, detectedPaths })` returns the full profile and sanity-checks it carries `(version 1)`.
 
 ### `sandbox/extras.ts` (pure)
-Compiles a box's **declarative** `mcp` / `systemPrompt` config into claude args (and the files they reference), so user config stays pure data and clabox owns the wiring. `boxSlug(configFile, projectDir)` derives a stable slug — the config-file basename minus `.config.mjs`/`.mjs`, else the project-dir basename. `buildBoxExtras(config, slug)` returns `{ claudeArgs, files }`: when `config.mcp` (a `Record<string, McpServer>`) is non-empty it writes `<configDir>/mcp/<slug>.json` (`{ mcpServers: … }`) and emits `--strict-mcp-config --mcp-config <file>` so a **shared** `configDir`'s *global/plugin* MCP servers are ignored — each box loads exactly its own; `config.systemPrompt` (`string | string[]`, joined with blank lines) is appended inline via `--append-system-prompt` (no file). The json lives under `configDir` because the sandbox grants it RW — and because `~/.config/*` is hard-denied, it can't sit next to the box config.
+Compiles a box's **declarative** `mcp` / `systemPrompt` / `hooks` config into claude args (and the files they reference), so user config stays pure data and clabox owns the wiring. `boxSlug(configFile, projectDir)` derives a stable slug — the config-file basename minus `.config.mjs`/`.mjs`, else the project-dir basename. `buildBoxExtras(config, slug)` returns `{ claudeArgs, files }`: when `config.mcp` (a `Record<string, McpServer>`) is non-empty it writes `<claboxHome>/mcp/<slug>.json` (`{ mcpServers: … }`) and emits `--strict-mcp-config --mcp-config <file>` so a **shared** `configDir`'s *global/plugin* MCP servers are ignored — each box loads exactly its own; `config.systemPrompt` (`string | string[]`, joined with blank lines) is appended inline via `--append-system-prompt` (no file); `config.hooks` (a `HooksConfig` = claude's settings.json `hooks` map) is merged into a settings object written to `<claboxHome>/settings/<slug>.json` and loaded with `--settings <file>`. The merge matters because a second `--settings` flag *replaces* the first rather than deep-merging, so `readInlineSettings()` first parses any inline `--settings` JSON already in `config.claudeArgs` (e.g. `{"includeCoAuthoredBy": false}`) and folds the hooks into it — emitted after `config.claudeArgs`, the file then wins the last-`--settings`-takes-all race while carrying the merged result. Both json files live under clabox's **own** home (`claboxHomeDir()` = `~/.config/clabox`, via `claboxMcpDir()`/`claboxSettingsDir()`) — **not** the Claude `configDir`, so clabox never writes into Claude's profile dir. Since `~/.config` is hard-denied, the sandbox profile re-grants **READ+WRITE** to the whole `~/.config/clabox` home *after* the hard deny so the box can read them (and edit its own configs in-box).
 
 ### `sandbox/run.ts` (I/O)
-`profilePath()` returns the deterministic `$TMPDIR/clabox-<dir>-<hash>.sb` path. `resolveProjectDir(config)` returns the effective project dir — `config.cwd` (with `~` expanded) when set, else `process.cwd()` — and is what `generateProfile`/`runClaude` default to. `generateProfile()` requires `sandbox-exec`, builds the profile and writes it. `writeExtraFiles(files)` `mkdir -p`s and writes the per-box extras (the MCP json). `runClaude()` resolves the project dir + `claude` binary (config → PATH → `~/.local/bin/claude`), compiles + materializes the box extras (`buildBoxExtras` + `writeExtraFiles`), forces the bot git identity + hardening env (`buildEnvArgs`, with `config.env` appended last so it wins), sets the terminal title, and execs `sh -c 'ulimit -u N; exec sandbox-exec -f <sb> env … claude <config.claudeArgs> <extras> <CLI args>'` **in the resolved project dir** (`spawnSync` `cwd`), returning the exit code. (`runInit` also materializes the extras at `init` time via `scaffold.ts#materializeExtras`, slug = box name.)
+`profilePath()` returns the deterministic `$TMPDIR/clabox-<dir>-<hash>.sb` path. `resolveProjectDir(config)` returns the effective project dir — `config.cwd` (with `~` expanded) when set, else `process.cwd()` — and is what `generateProfile`/`runClaude` default to. `generateProfile()` requires `sandbox-exec`, builds the profile and writes it. `writeExtraFiles(files)` `mkdir -p`s and writes the per-box extras (the mcp/settings json under `~/.config/clabox`). `runClaude()` resolves the project dir + `claude` binary (config → PATH → `~/.local/bin/claude`), compiles + materializes the box extras (`buildBoxExtras` + `writeExtraFiles`), forces the bot git identity + hardening env (`buildEnvArgs`, with `config.env` appended last so it wins), sets the terminal title, and execs `sh -c 'ulimit -u N; exec sandbox-exec -f <sb> env … claude <config.claudeArgs> <extras> <CLI args>'` **in the resolved project dir** (`spawnSync` `cwd`), returning the exit code. (`runInit` also materializes the extras at `init` time via `scaffold.ts#materializeExtras`, slug = box name.)
+
+### `info/info.ts` (pure `formatInfo` + I/O `gatherInfo`)
+Backs `clabox info`, the introspection report — version, the resolved box/project/profile, the effective config, the compiled per-box extras, and the clabox-relevant env vars. `gatherInfo(config, { configFile, box })` is the I/O snapshot: it resolves `claude` and `sandbox-exec` (via the now-exported `run.ts#which`), records the running `process.argv[1]`/`process.execPath`, the deterministic profile path (+ whether it's been built), the compiled `buildBoxExtras` args/files, and the present `CLABOX_*` / `CLAUDE_CONFIG_DIR` env, returning a flat serializable `InfoData`. `formatInfo(data, { color })` is the **pure** aligned-text builder — sections (`[clabox]`/`[box]`/`[config]`/`[extras]`/`[env]`), label-padded rows, multiline args collapsed to one line; `color` (off by default, on for a TTY) wraps headers/labels/placeholders in ANSI. **Version + self-path** come from `resolveClaboxPackage()`, which walks up from `import.meta.url` to the `package.json` whose `name === 'clabox'`: a fixed `../../package.json` is wrong once tsdown hoists shared code into a hashed chunk (`lib/info-<hash>.js`) at a different depth, but the walk-up holds across the source tree, the built tree and an installed `node_modules/clabox/`. `cli.ts` prints the report through `@lsk4/log` (`createLogger('clabox').log(report)` keeps the table clean; `.warn(…)` flags a missing `claude`/`sandbox-exec`).
 
 ### `init/aliases.ts` (pure) + `init/scaffold.ts` (I/O)
-`clabox init` turns a directory of box configs into ready-to-use shell commands. `aliases.ts` is pure text: `aliasName(profile)` yields `clabox-<name>`; `buildIndex()` renders the source-able `index.sh` (a `_clabox_run` helper that runs `CLABOX_CONFIGS_DIR=<configsDir> clabox -b "$1"` plus one function per box); `buildWrapper()` renders a standalone `.sh` that sources `index.sh` and calls one function; `buildAliasFiles()` returns the full file set. There is **one command per box** — yolo vs. safe is decided by the box's own preset (`claudeArgs`), not by a `-safe` alias. `scaffold.ts` does the I/O: `discoverProfiles(configsDir)` returns the sorted box names via `listBoxes` (both `<name>.mjs`/`<name>.config.mjs`, `_`-partials skipped; throws if the dir is missing or has no boxes), and `runInit({ baseDir, buildApps, only })` (async) resolves `<baseDir>/configs` + `<baseDir>/scripts` (default `<cwd>/__`), prunes its own prior artifacts (`index.sh`, `clabox-*.sh`), then writes the new ones `chmod +x`. It also materializes each box's MCP json (`materializeExtras`, best-effort per box). Absolute paths are baked in so the scripts run from any cwd. It returns `{ profiles, written, apps, ghosttyConfigs, raycastCommands, extraFiles, warnings, … }`.
+`clabox init` turns a directory of box configs into ready-to-use shell commands. `aliases.ts` is pure text: `aliasName(profile)` yields `clabox-<name>`; `buildIndex()` renders the source-able `index.sh` (a `_clabox_run` helper that runs `clabox -b "$1"`, prefixed with `CLABOX_CONFIGS_DIR=<configsDir>` only when `configsDir` is non-null — see `bakeConfigsDir` below — plus one function per box); `buildWrapper()` renders a standalone `.sh` that sources `index.sh` and calls one function; `buildAliasFiles()` returns the full file set. There is **one command per box** — yolo vs. safe is decided by the box's own preset (`claudeArgs`), not by a `-safe` alias. `scaffold.ts` does the I/O: `discoverProfiles(configsDir)` returns the sorted box names via `listBoxes` (both `<name>.mjs`/`<name>.config.mjs`, `_`-partials skipped; throws if the dir is missing or has no boxes), and `runInit({ baseDir, buildApps, only })` (async) resolves `<baseDir>/configs` + `<baseDir>/scripts` (default `baseDir` = `defaultBaseDir()` = the parent of the global `configsDir()`, i.e. `~/.config/clabox`, honoring `CLABOX_CONFIGS_DIR`; pass `--dir` for a project-local `<dir>/configs`), prunes its own prior artifacts (`index.sh`, `clabox-*.sh`), then writes the new ones `chmod +x`. It also materializes each box's MCP json (`materializeExtras`, best-effort per box). **Generated commands resolve at run time, not init time**: `clabox` is emitted bare (PATH-resolved at launch — survives package-manager moves like bun → npm/homebrew), and `bakeConfigsDir(dir)` returns `null` (omit the `CLABOX_CONFIGS_DIR` prefix) when `<dir>/configs` already resolves (realpath, symlinks included) to the runtime default `~/.config/clabox/configs`, else the absolute path. The project `cd` dir stays absolute. It returns `{ profiles, written, apps, ghosttyConfigs, raycastCommands, extraFiles, warnings, … }`.
 
 ### `init/ghostty.ts` + `init/raycast.ts` (pure) + `init/app.ts` (I/O) — standalone Ghostty apps
-A box becomes a real macOS app by carrying an `app` object (`AppConfig`: `name`, `title?`, `emoji?`, `icon?`, `macosIcon?`, `ghostty?`, `bundleId?`). When `runInit` runs with `buildApps` (the default), it `loadConfig`s each box and, for every box with an `app`, writes `<baseDir>/ghostty/<name>.config`, a `<baseDir>/raycast/<name>.sh` Raycast command, and clones a `.app`. `ghostty.ts` is pure text: `buildGhosttyConfig()` renders the config (a `command = zsh -lic 'cd <cwd> && CLABOX_CONFIGS_DIR=<dir> <claboxBin> -b <name>; exec zsh'` — a **login + interactive** zsh so the GUI-launched app inherits the user's PATH (`/etc/zprofile`→`path_helper` for Homebrew, `~/.zshrc` for fnm/nvm/volta); a bare `bash -c` gets only launchd's minimal PATH and can't find `node` for clabox's `#!/usr/bin/env node` shebang — plus `title`/`macos-icon`/extra `app.ghostty` lines and an optional leading `config-file`); `buildLauncherSource()` renders a tiny C launcher that finds `ghostty.real` next to itself and re-execs it with `--config-file=<config>` baked in; `appBundlePath()`/`bundleId()` derive the bundle path/id. `raycast.ts` renders the Raycast script command (`buildRaycastCommand()`: `@raycast.*` metadata + `open <appPath>`; `raycastIcon()` picks `app.emoji`, else the title's leading emoji, else 👻). `app.ts` is the macOS-only I/O (replaces the old `ghostty-app-builder.sh`): `canBuildApps(builder)` gates on darwin + donor app + `cc`; `buildApp()` extracts the donor's entitlements, `cp -R` clones Ghostty.app into `<appsDir>/<name>.app`, patches `Info.plist` (identity + Sparkle off), swaps the binary for the compiled launcher, installs the icon (`.icns` copy or `.png`→`sips`+`iconutil`, plus `plutil -remove CFBundleIconName` — Ghostty's plist references an icon inside its compiled `Assets.car`, which macOS prefers over the loose `.icns`, so the name must be dropped for our icon to take effect), and `codesign`s (`appBuilder.signId`, else ad-hoc `-`). Machine-wide build settings live in `config.appBuilder` (`ghosttyApp`, `appsDir`, `signId`, `baseGhosttyConfig`, `claboxBin`). Builds are best-effort: a non-buildable host or a thrown build records a `warning` and the aliases (plus the ghostty config + raycast script) are still emitted. `init` prunes its own `<baseDir>/ghostty/*.config` and `<baseDir>/raycast/*.sh` on a full run (not under `--app`, which would orphan other apps' artifacts); built `.app` bundles are **not** auto-deleted.
+A box becomes a real macOS app by carrying an `app` object (`AppConfig`: `name`, `title?`, `emoji?`, `icon?`, `macosIcon?`, `ghostty?`, `bundleId?`). When `runInit` runs with `buildApps` (the default), it `loadConfig`s each box and, for every box with an `app`, writes `<baseDir>/ghostty/<name>.config`, a `<baseDir>/raycast/<name>.sh` Raycast command, and clones a `.app`. `ghostty.ts` is pure text: `buildGhosttyConfig()` renders the config (a `command = zsh -lic 'cd <cwd> && [CLABOX_CONFIGS_DIR=<dir> ]<claboxBin> -b <name>; exec zsh'` — a **login + interactive** zsh so the GUI-launched app inherits the user's PATH (`/etc/zprofile`→`path_helper` for Homebrew, `~/.zshrc` for fnm/nvm/volta); a bare `bash -c` gets only launchd's minimal PATH and can't find `node` for clabox's `#!/usr/bin/env node` shebang. `<claboxBin>` defaults to a bare `clabox` (PATH-resolved at launch by that login shell — `appBuilder.claboxBin` pins an absolute path instead); the `CLABOX_CONFIGS_DIR=<dir> ` prefix is present only when `configsDir` is non-null (`bakeConfigsDir`, same rule as the aliases). Plus `title`/`macos-icon`/extra `app.ghostty` lines and an optional leading `config-file`); `buildLauncherSource()` renders a tiny C launcher that finds `ghostty.real` next to itself and re-execs it with `--config-file=<config>` baked in; `appBundlePath()`/`bundleId()` derive the bundle path/id. `raycast.ts` renders the Raycast script command (`buildRaycastCommand()`: `@raycast.*` metadata + `open <appPath>`; `raycastIcon()` picks `app.emoji`, else the title's leading emoji, else 👻). `app.ts` is the macOS-only I/O (replaces the old `ghostty-app-builder.sh`): `canBuildApps(builder)` gates on darwin + donor app + `cc`; `buildApp()` builds into a staging `<appsDir>/<name>.app.new` and atomically `rename`s it onto `<appsDir>/<name>.app` **only after all steps succeed** (so a failed build never destroys an existing working bundle): it extracts the donor's entitlements, `cp -R` clones Ghostty.app into the stage, patches `Info.plist` (identity + Sparkle off), swaps the binary for the compiled launcher, installs the icon (`.icns` copy or `.png`→`sips`+`iconutil`, plus `plutil -remove CFBundleIconName` — Ghostty's plist references an icon inside its compiled `Assets.car`, which macOS prefers over the loose `.icns`, so the name must be dropped for our icon to take effect), and `codesign`s (`appBuilder.signId`, else ad-hoc `-`). Machine-wide build settings live in `config.appBuilder` (`ghosttyApp`, `appsDir`, `signId`, `baseGhosttyConfig`, `claboxBin`). Builds are best-effort: a non-buildable host or a thrown build records a `warning` and the aliases (plus the ghostty config + raycast script) are still emitted. `init` prunes its own `<baseDir>/ghostty/*.config` and `<baseDir>/raycast/*.sh` on a full run (not under `--app`, which would orphan other apps' artifacts); built `.app` bundles are **not** auto-deleted.
 
 ### `cli.ts`
-The yargs CLI (`scriptName('clabox')`). Commands: `run [claudeArgs..]` (default), `generate`, `profile`, `init`. `unknown-options-as-args` keeps unknown flags as positionals so they pass straight through to `claude` (e.g. `--dangerously-skip-permissions`). clabox-owned flags: `--config <path>` (a JS config file that overrides `CLABOX_CONFIG`) and `-b`/`--box <name>` (a named box from the global configs dir; resolved via `resolveBox` and winning over `--config`) — both forwarded to `loadConfig()` by `run` and `generate` through the `explicitConfig(argv)` helper. (`-b` deliberately avoids `-p`/`-c`/`-r`/`-d`/`-v`, which are claude's own `--print`/`--continue`/`--resume`/`--debug`/`--verbose`.) `init` takes `--dir <path>` (the base dir holding `configs/` and `scripts/`, default `./__`), `--no-apps` (skip the Ghostty-app build), and `--app <box|name>` ((re)build a single app box, by box name or `app.name`).
+The yargs CLI (`scriptName('clabox')`). Commands: `run [claudeArgs..]` (default), `generate`, `profile`, `info`, `init`. `unknown-options-as-args` keeps unknown flags as positionals so they pass straight through to `claude` (e.g. `--dangerously-skip-permissions`). `info` honors the same `--config`/`-b` selection (via `explicitConfig(argv)`) and renders `formatInfo(gatherInfo(...))` through `@lsk4/log` — the one place a non-`yargs` runtime dep is used. clabox-owned flags: `--config <path>` (a JS config file that overrides `CLABOX_CONFIG`) and `-b`/`--box <name>` (a named box from the global configs dir; resolved via `resolveBox` and winning over `--config`) — both forwarded to `loadConfig()` by `run` and `generate` through the `explicitConfig(argv)` helper. (`-b` deliberately avoids `-p`/`-c`/`-r`/`-d`/`-v`, which are claude's own `--print`/`--continue`/`--resume`/`--debug`/`--verbose`.) `init` takes `--dir <path>` (the base dir holding `configs/` and `scripts/`, default `~/.config/clabox` = parent of the global `configsDir()`, honoring `CLABOX_CONFIGS_DIR`), `--no-apps` (skip the Ghostty-app build), and `--app <box|name>` ((re)build a single app box, by box name or `app.name`).
 
 ### What the profile allows and denies
 - **Read-only:** system dirs (`/System`, `/usr`, `/bin`, `/sbin`, `/Library/Frameworks`), Command Line Tools / Xcode, tzdata, system + user `Library/Preferences`, detected package paths.
@@ -136,7 +144,8 @@ The yargs CLI (`scriptName('clabox')`). Commands: `run [claudeArgs..]` (default)
 - **Network:** `(allow network*)` when `network: true` (default).
 - **Two deny tiers** (Seatbelt evaluates rules in order — the *last* match wins — so placement is deliberate):
   - **Soft privacy deny (overridable):** `denyHome` (`~/Documents`, `~/Desktop`, …) and `paths.deny`, emitted *before* the extra `readOnly`/`readWrite` and the project dir. An explicit grant therefore overrides it — handy for a project that lives under `~/Documents`, a debug box that wants `readOnly: ['/']` to roam the disk, or a **root box that wants `readWrite: ['/']`** to read *and write* anywhere on disk (the hard secret deny below still wins, so credentials and private keys stay protected even with a whole-disk RW grant).
-  - **Hard secret deny (always wins):** `denyDotConfigs` (`~/.aws`, `~/.gnupg`, `~/.kube`, `~/.docker`, `~/.config`) and personal SSH keys `~/.ssh/id_*`, `*.pem`, `*.key`, emitted as the **very last file rule** — after every allow, the extra paths and the project dir. No `readOnly`/`readWrite` grant can re-expose these. Only the bot key subdir (`bot.sshDir`, not matched by the patterns) stays readable. (The `~/.config/git` RO carve-out is shadowed by the hard deny on `~/.config`; git still reads `~/.gitconfig` outside `~/.config`.)
+  - **Hard secret deny (always wins):** `denyDotConfigs` (`~/.aws`, `~/.gnupg`, `~/.kube`, `~/.docker`, `~/.config`) and personal SSH keys `~/.ssh/id_*`, `*.pem`, `*.key`, emitted as the **last deny** — after every allow, the extra paths and the project dir. No `readOnly`/`readWrite` grant can re-expose these. Only the bot key subdir (`bot.sshDir`, not matched by the patterns) stays readable. (The `~/.config/git` RO carve-out is shadowed by the hard deny on `~/.config`; git still reads `~/.gitconfig` outside `~/.config`.)
+  - **clabox-extras RO carve-out (the only rule after the hard deny):** a single `allow file-read*` for `claboxMcpDir()` + `claboxSettingsDir()` (`~/.config/clabox/{mcp,settings}`). Those dirs hold clabox's **own** compiled `--mcp-config`/`--settings` json, which the `~/.config` hard deny above would otherwise block; re-granting **read** (last match wins) lets the sandboxed claude load them. It re-exposes exactly those two dirs and nothing credential-shaped, and grants read-only (clabox writes the files before launch, so no in-box write is needed), so the "credentials never readable" invariant still holds. **Symlinked home:** the macOS sandbox matches rules against the *symlink-resolved* path (the reason both `/tmp` and `/private/tmp` are granted), so when `~/.config/clabox` is a symlink — e.g. relocated *into* a project repo so the box configs + compiled extras live in-tree — the json files physically sit at the target and the nominal grant never matches, failing the in-box read with `EPERM`. `resolvedExtrasDirs()` (in `profile.ts`) `realpath`s `claboxHomeDir()` and, when it differs, appends the resolved `mcp`/`settings` dirs to this carve-out. It resolves the home (which always exists) and re-joins the leaf names, so it works even before the subdirs are materialized; it returns `[]` when the home is absent or already canonical. Only those two subdirs are exposed at the resolved location, so the invariant holds wherever the home points.
 
 ### Git/ssh bot identity
 `ulimit -u <ulimitProcs>` (fork-bomb guard, `0` to disable); `GIT_AUTHOR_*` / `GIT_COMMITTER_*` from `bot.name`/`bot.email`; if `bot.sshDir/id_ed25519` exists, `GIT_SSH_COMMAND` is pinned to it (`IdentitiesOnly=yes`, `IdentityAgent=none`); gpg signing disabled; `NPM_CONFIG_USERCONFIG=/dev/null`; `DISABLE_AUTOUPDATER=1`.
@@ -148,7 +157,7 @@ The yargs CLI (`scriptName('clabox')`). Commands: `run [claudeArgs..]` (default)
 
 Biome (`biome.json`), scoped to `src/**/*.ts` + `tests/**/*.ts`:
 - `recommended` preset; `noExplicitAny` and `noNonNullAssertion` off.
-- `useImportExtensions` (error, `forceJsExtensions`) — relative imports must use `.js` specifiers.
+- `useImportExtensions` (error, `forceJsExtensions`) — relative imports must use `.js` specifiers. (It also rewrites a literal `.json` specifier to `.js`, which is why `info.ts` reads its own `package.json` by walking up from `import.meta.url` rather than `import`/`require`-ing it.)
 - Formatter: 2-space indent, line width 100, single quotes, always semicolons.
 
 ## CI/CD
@@ -168,6 +177,7 @@ Both workflows run on `macos-latest` so the functional tests can exercise the re
 
 ```typescript
 import { loadConfig, buildProfile, runClaude, runInit } from 'clabox'; // lib/index.js
+import { gatherInfo, formatInfo, resolveClaboxPackage } from 'clabox'; // lib/index.js (info report)
 import { loadConfig, defaultConfig, mergeConfig } from 'clabox/config'; // lib/utils/config.js
 import { buildProfile, detectPackagePaths } from 'clabox/profile';   // lib/sandbox/profile.js
 import { generateProfile, profilePath, resolveProjectDir, runClaude } from 'clabox/run'; // lib/sandbox/run.js
@@ -185,12 +195,11 @@ import { generateProfile, profilePath, resolveProjectDir, runClaude } from 'clab
 | `CLABOX_BOT_SSH_DIR` | bot key dir (`id_ed25519`, `config`) | `~/.ssh/claudebot` |
 | `CLABOX_CONFIG` | path to the JS config file (the `--config` flag overrides it) | — |
 | `CLABOX_CONFIGS_DIR` | global dir of named boxes for `-b`/`--box <name>` (`<name>.config.mjs`) | `~/.config/clabox/configs` |
-| `CLABOX_HOOKS_DIR` | hooks dir (RO + exec inside the sandbox) | — (off) |
 | `CLABOX_GHOSTTY_APP` | donor app cloned by `init` for `app` boxes (`config.appBuilder.ghosttyApp`) | `/Applications/Ghostty.app` |
 | `CLABOX_APPS_DIR` | where `init` writes built `.app`s (`config.appBuilder.appsDir`) | `~/Applications` |
 | `CLABOX_SIGN_ID` | codesign identity for built apps (`config.appBuilder.signId`); unset → ad-hoc | — |
 | `CLABOX_GHOSTTY_BASE_CONFIG` | leading `config-file = …` in generated Ghostty configs | — |
-| `CLABOX_CLABOX_BIN` | `clabox` path baked into the Ghostty `command` (`config.appBuilder.claboxBin`) | autodetect |
+| `CLABOX_CLABOX_BIN` | absolute `clabox` path to pin in the Ghostty `command` (`config.appBuilder.claboxBin`); unset → bare `clabox` (PATH-resolved at launch) | bare `clabox` |
 | `CLABOX_DEBUG` | print profile/config/dir diagnostics on launch | — |
 | `TMPDIR` | where the generated profile is stored | `/tmp` |
 

package/lib/{app-ChnKbgkD.js → app-CuEM7S0i.js}

@@ -1,4 +1,4 @@
-import { i as expandHome } from "./config-BQ44iVWT.js";
+import { s as expandHome } from "./config-CY_Cf87P.js";
 import { a as bundleId, i as buildLauncherSource, t as appBundlePath } from "./ghostty-Dw4QLyl-.js";
 import path from "node:path";
 import fs from "node:fs";
@@ -153,19 +153,20 @@ function buildApp(opts) {
 	const ghosttyApp = expandHome(builder.ghosttyApp);
 	const appsDir = expandHome(builder.appsDir);
 	const appPath = appBundlePath(appsDir, app);
-	const plist = path.join(appPath, "Contents", "Info.plist");
+	const stagePath = `${appPath}.new`;
+	const plist = path.join(stagePath, "Contents", "Info.plist");
 	const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "clabox-app-"));
 	try {
 		const entitlements = extractEntitlements(ghosttyApp, tmpDir);
 		fs.mkdirSync(appsDir, { recursive: true });
-		fs.rmSync(appPath, {
+		fs.rmSync(stagePath, {
 			recursive: true,
 			force: true
 		});
 		run("cp", [
 			"-R",
 			ghosttyApp,
-			appPath
+			stagePath
 		]);
 		run("plutil", [
 			"-replace",
@@ -211,7 +212,7 @@ function buildApp(opts) {
 				plist
 			]);
 		} catch {}
-		const bin = path.join(appPath, "Contents", "MacOS", "ghostty");
+		const bin = path.join(stagePath, "Contents", "MacOS", "ghostty");
 		fs.renameSync(bin, `${bin}.real`);
 		const src = path.join(tmpDir, "launcher.c");
 		fs.writeFileSync(src, buildLauncherSource(configPath));
@@ -220,7 +221,7 @@ function buildApp(opts) {
 			bin,
 			src
 		]);
-		installIcon(app, appPath, tmpDir);
+		installIcon(app, stagePath, tmpDir);
 		const signId = builder.signId;
 		const entArgs = entitlements ? ["--entitlements", entitlements] : [];
 		const idArgs = signId ? ["--sign", signId] : ["--sign", "-"];
@@ -235,8 +236,13 @@ function buildApp(opts) {
 			"--deep",
 			...idArgs,
 			...entArgs,
-			appPath
+			stagePath
 		]);
+		fs.rmSync(appPath, {
+			recursive: true,
+			force: true
+		});
+		fs.renameSync(stagePath, appPath);
 		return {
 			appPath,
 			signed: signId ? "identity" : "adhoc"
@@ -246,9 +252,13 @@ function buildApp(opts) {
 			recursive: true,
 			force: true
 		});
+		fs.rmSync(stagePath, {
+			recursive: true,
+			force: true
+		});
 	}
 }
 //#endregion
 export { canBuildApps as n, installIcon as r, buildApp as t };
 
-//# sourceMappingURL=app-ChnKbgkD.js.map
+//# sourceMappingURL=app-CuEM7S0i.js.map

package/lib/app-CuEM7S0i.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-CuEM7S0i.js","names":[],"sources":["../src/init/app.ts"],"sourcesContent":["// I/O for the `clabox init` Ghostty-app builder (macOS-only).\n//\n// Clones Ghostty.app into `<appsDir>/<name>.app`, swaps the binary for a tiny\n// compiled launcher that bakes in `--config-file=<config>`, sets the icon,\n// disables Sparkle, and re-signs. Mirrors the old ghostty-app-builder.sh. The\n// pure text builders live in init/ghostty.ts.\n\nimport { execFileSync } from 'node:child_process';\nimport fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\nimport { type AppBuilderConfig, type AppConfig, expandHome } from '../utils/config.js';\nimport { appBundlePath, buildLauncherSource, bundleId } from './ghostty.js';\n\n/** Inputs for {@link buildApp}. */\nexport interface BuildAppOptions {\n  /** The `-b` box name (drives the default bundle id). */\n  boxName: string;\n  app: AppConfig;\n  builder: AppBuilderConfig;\n  /** Absolute path to the already-written Ghostty config to bake in. */\n  configPath: string;\n}\n\n/** Result of a successful {@link buildApp}. */\nexport interface BuildAppResult {\n  appPath: string;\n  signed: 'identity' | 'adhoc';\n}\n\nfunction run(cmd: string, args: string[]): void {\n  execFileSync(cmd, args, { stdio: ['ignore', 'ignore', 'pipe'] });\n}\n\nfunction has(bin: string): boolean {\n  try {\n    execFileSync('command', ['-v', bin], { shell: '/bin/sh', stdio: 'ignore' });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** True when the host can build apps (macOS with the donor app + a C compiler). */\nexport function canBuildApps(builder: AppBuilderConfig): { ok: boolean; reason?: string } {\n  if (process.platform !== 'darwin') return { ok: false, reason: 'not macOS' };\n  if (!fs.existsSync(expandHome(builder.ghosttyApp))) {\n    return { ok: false, reason: `Ghostty not found at ${builder.ghosttyApp}` };\n  }\n  if (!has('cc')) return { ok: false, reason: 'no C compiler (cc) — install Xcode CLT' };\n  return { ok: true };\n}\n\n/** Extract the donor app's entitlements to a tmp file, or null if it has none. */\nfunction extractEntitlements(ghosttyApp: string, tmpDir: string): string | null {\n  let xml: string;\n  try {\n    xml = execFileSync('codesign', ['-d', '--entitlements', '-', '--xml', ghosttyApp], {\n      encoding: 'utf8',\n      stdio: ['ignore', 'pipe', 'ignore'],\n    });\n  } catch {\n    return null;\n  }\n  const start = xml.indexOf('<?xml');\n  if (start < 0) return null;\n  const file = path.join(tmpDir, 'entitlements.xml');\n  fs.writeFileSync(file, xml.slice(start));\n  return file;\n}\n\n/** Name of the icon resource referenced by the bundle (default Ghostty.icns). */\nfunction iconResourceName(plist: string): string {\n  try {\n    const name = execFileSync('plutil', ['-extract', 'CFBundleIconFile', 'raw', plist], {\n      encoding: 'utf8',\n      stdio: ['ignore', 'pipe', 'ignore'],\n    }).trim();\n    return name.endsWith('.icns') ? name : `${name}.icns`;\n  } catch {\n    return 'Ghostty.icns';\n  }\n}\n\n/** Convert a PNG into a multi-resolution .icns at `out`. */\nfunction pngToIcns(png: string, out: string, tmpDir: string): void {\n  const iconset = path.join(tmpDir, 'icon.iconset');\n  fs.mkdirSync(iconset, { recursive: true });\n  for (const size of [16, 32, 128, 256, 512]) {\n    run('sips', [\n      '-z',\n      `${size}`,\n      `${size}`,\n      png,\n      '--out',\n      path.join(iconset, `icon_${size}x${size}.png`),\n    ]);\n    const d = size * 2;\n    run('sips', [\n      '-z',\n      `${d}`,\n      `${d}`,\n      png,\n      '--out',\n      path.join(iconset, `icon_${size}x${size}@2x.png`),\n    ]);\n  }\n  run('iconutil', ['-c', 'icns', iconset, '-o', out]);\n}\n\n/** Install the box icon into the cloned bundle, if `app.icon` is set. */\nexport function installIcon(app: AppConfig, appPath: string, tmpDir: string): void {\n  if (!app.icon) return;\n  const icon = expandHome(app.icon);\n  if (!fs.existsSync(icon)) throw new Error(`icon not found: ${app.icon}`);\n  const plist = path.join(appPath, 'Contents', 'Info.plist');\n  const dest = path.join(appPath, 'Contents', 'Resources', iconResourceName(plist));\n  if (icon.endsWith('.icns')) fs.copyFileSync(icon, dest);\n  else if (icon.endsWith('.png')) pngToIcns(icon, dest, tmpDir);\n  else throw new Error(`unsupported icon type (need .icns/.png): ${app.icon}`);\n\n  // Ghostty ships a compiled asset catalog (Assets.car) and a `CFBundleIconName`\n  // pointing into it, which macOS prefers over the loose `CFBundleIconFile`\n  // .icns we just replaced — so our icon would be ignored. Drop the asset-catalog\n  // reference so macOS falls back to the .icns. (May be absent on other donors.)\n  try {\n    run('plutil', ['-remove', 'CFBundleIconName', plist]);\n  } catch {\n    // donor app may not define CFBundleIconName — ignore\n  }\n}\n\n/**\n * Build the standalone Ghostty app for a box. Throws on any failure (the caller\n * decides whether to abort or carry on with the other boxes).\n */\nexport function buildApp(opts: BuildAppOptions): BuildAppResult {\n  const { app, builder, boxName, configPath } = opts;\n  const check = canBuildApps(builder);\n  if (!check.ok) throw new Error(`cannot build app: ${check.reason}`);\n\n  const ghosttyApp = expandHome(builder.ghosttyApp);\n  const appsDir = expandHome(builder.appsDir);\n  const appPath = appBundlePath(appsDir, app);\n  // Build into a staging clone next to the final bundle (same filesystem → the\n  // final rename is atomic) and only swap it in once every step has succeeded.\n  // A failed build (e.g. an unreadable donor) must never destroy an existing\n  // working bundle — so we touch `appPath` only at the very end.\n  const stagePath = `${appPath}.new`;\n  const plist = path.join(stagePath, 'Contents', 'Info.plist');\n  const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'clabox-app-'));\n\n  try {\n    const entitlements = extractEntitlements(ghosttyApp, tmpDir);\n\n    // Full clone (cp -R keeps bundle symlinks/frameworks intact).\n    fs.mkdirSync(appsDir, { recursive: true });\n    fs.rmSync(stagePath, { recursive: true, force: true });\n    run('cp', ['-R', ghosttyApp, stagePath]);\n\n    // Identity.\n    run('plutil', ['-replace', 'CFBundleIdentifier', '-string', bundleId(boxName, app), plist]);\n    run('plutil', ['-replace', 'CFBundleName', '-string', app.name, plist]);\n    run('plutil', ['-replace', 'CFBundleDisplayName', '-string', app.name, plist]);\n    run('plutil', ['-replace', 'CFBundleExecutable', '-string', 'ghostty', plist]);\n\n    // Disable Sparkle auto-update (would clobber the clone).\n    run('plutil', ['-replace', 'SUEnableAutomaticChecks', '-bool', 'NO', plist]);\n    try {\n      run('plutil', ['-replace', 'SUFeedURL', '-string', '', plist]);\n    } catch {\n      // donor app may not define SUFeedURL — ignore\n    }\n\n    // Swap the binary for a launcher that prepends --config-file.\n    const bin = path.join(stagePath, 'Contents', 'MacOS', 'ghostty');\n    fs.renameSync(bin, `${bin}.real`);\n    const src = path.join(tmpDir, 'launcher.c');\n    fs.writeFileSync(src, buildLauncherSource(configPath));\n    run('cc', ['-o', bin, src]);\n\n    installIcon(app, stagePath, tmpDir);\n\n    // Re-sign: inner real binary first, then the whole bundle. (The signature\n    // seals the bundle contents, not its directory name, so the rename below\n    // keeps it valid.)\n    const signId = builder.signId;\n    const entArgs = entitlements ? ['--entitlements', entitlements] : [];\n    const idArgs = signId ? ['--sign', signId] : ['--sign', '-'];\n    run('codesign', ['--force', ...idArgs, ...entArgs, `${bin}.real`]);\n    run('codesign', ['--force', '--deep', ...idArgs, ...entArgs, stagePath]);\n\n    // Everything succeeded — atomically replace the previous bundle.\n    fs.rmSync(appPath, { recursive: true, force: true });\n    fs.renameSync(stagePath, appPath);\n\n    return { appPath, signed: signId ? 'identity' : 'adhoc' };\n  } finally {\n    fs.rmSync(tmpDir, { recursive: true, force: true });\n    // Clean a leftover stage from a failed build (no-op after a successful swap).\n    fs.rmSync(stagePath, { recursive: true, force: true });\n  }\n}\n"],"mappings":";;;;;;;AA8BA,SAAS,IAAI,KAAa,MAAsB;CAC9C,aAAa,KAAK,MAAM,EAAE,OAAO;EAAC;EAAU;EAAU;CAAM,EAAE,CAAC;AACjE;AAEA,SAAS,IAAI,KAAsB;CACjC,IAAI;EACF,aAAa,WAAW,CAAC,MAAM,GAAG,GAAG;GAAE,OAAO;GAAW,OAAO;EAAS,CAAC;EAC1E,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,aAAa,SAA6D;CACxF,IAAI,QAAQ,aAAa,UAAU,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAY;CAC3E,IAAI,CAAC,GAAG,WAAW,WAAW,QAAQ,UAAU,CAAC,GAC/C,OAAO;EAAE,IAAI;EAAO,QAAQ,wBAAwB,QAAQ;CAAa;CAE3E,IAAI,CAAC,IAAI,IAAI,GAAG,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAyC;CACrF,OAAO,EAAE,IAAI,KAAK;AACpB;;AAGA,SAAS,oBAAoB,YAAoB,QAA+B;CAC9E,IAAI;CACJ,IAAI;EACF,MAAM,aAAa,YAAY;GAAC;GAAM;GAAkB;GAAK;GAAS;EAAU,GAAG;GACjF,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACpC,CAAC;CACH,QAAQ;EACN,OAAO;CACT;CACA,MAAM,QAAQ,IAAI,QAAQ,OAAO;CACjC,IAAI,QAAQ,GAAG,OAAO;CACtB,MAAM,OAAO,KAAK,KAAK,QAAQ,kBAAkB;CACjD,GAAG,cAAc,MAAM,IAAI,MAAM,KAAK,CAAC;CACvC,OAAO;AACT;;AAGA,SAAS,iBAAiB,OAAuB;CAC/C,IAAI;EACF,MAAM,OAAO,aAAa,UAAU;GAAC;GAAY;GAAoB;GAAO;EAAK,GAAG;GAClF,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACpC,CAAC,CAAC,CAAC,KAAK;EACR,OAAO,KAAK,SAAS,OAAO,IAAI,OAAO,GAAG,KAAK;CACjD,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAS,UAAU,KAAa,KAAa,QAAsB;CACjE,MAAM,UAAU,KAAK,KAAK,QAAQ,cAAc;CAChD,GAAG,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;CACzC,KAAK,MAAM,QAAQ;EAAC;EAAI;EAAI;EAAK;EAAK;CAAG,GAAG;EAC1C,IAAI,QAAQ;GACV;GACA,GAAG;GACH,GAAG;GACH;GACA;GACA,KAAK,KAAK,SAAS,QAAQ,KAAK,GAAG,KAAK,KAAK;EAC/C,CAAC;EACD,MAAM,IAAI,OAAO;EACjB,IAAI,QAAQ;GACV;GACA,GAAG;GACH,GAAG;GACH;GACA;GACA,KAAK,KAAK,SAAS,QAAQ,KAAK,GAAG,KAAK,QAAQ;EAClD,CAAC;CACH;CACA,IAAI,YAAY;EAAC;EAAM;EAAQ;EAAS;EAAM;CAAG,CAAC;AACpD;;AAGA,SAAgB,YAAY,KAAgB,SAAiB,QAAsB;CACjF,IAAI,CAAC,IAAI,MAAM;CACf,MAAM,OAAO,WAAW,IAAI,IAAI;CAChC,IAAI,CAAC,GAAG,WAAW,IAAI,GAAG,MAAM,IAAI,MAAM,mBAAmB,IAAI,MAAM;CACvE,MAAM,QAAQ,KAAK,KAAK,SAAS,YAAY,YAAY;CACzD,MAAM,OAAO,KAAK,KAAK,SAAS,YAAY,aAAa,iBAAiB,KAAK,CAAC;CAChF,IAAI,KAAK,SAAS,OAAO,GAAG,GAAG,aAAa,MAAM,IAAI;MACjD,IAAI,KAAK,SAAS,MAAM,GAAG,UAAU,MAAM,MAAM,MAAM;MACvD,MAAM,IAAI,MAAM,4CAA4C,IAAI,MAAM;CAM3E,IAAI;EACF,IAAI,UAAU;GAAC;GAAW;GAAoB;EAAK,CAAC;CACtD,QAAQ,CAER;AACF;;;;;AAMA,SAAgB,SAAS,MAAuC;CAC9D,MAAM,EAAE,KAAK,SAAS,SAAS,eAAe;CAC9C,MAAM,QAAQ,aAAa,OAAO;CAClC,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,MAAM,qBAAqB,MAAM,QAAQ;CAElE,MAAM,aAAa,WAAW,QAAQ,UAAU;CAChD,MAAM,UAAU,WAAW,QAAQ,OAAO;CAC1C,MAAM,UAAU,cAAc,SAAS,GAAG;CAK1C,MAAM,YAAY,GAAG,QAAQ;CAC7B,MAAM,QAAQ,KAAK,KAAK,WAAW,YAAY,YAAY;CAC3D,MAAM,SAAS,GAAG,YAAY,KAAK,KAAK,GAAG,OAAO,GAAG,aAAa,CAAC;CAEnE,IAAI;EACF,MAAM,eAAe,oBAAoB,YAAY,MAAM;EAG3D,GAAG,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;EACzC,GAAG,OAAO,WAAW;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EACrD,IAAI,MAAM;GAAC;GAAM;GAAY;EAAS,CAAC;EAGvC,IAAI,UAAU;GAAC;GAAY;GAAsB;GAAW,SAAS,SAAS,GAAG;GAAG;EAAK,CAAC;EAC1F,IAAI,UAAU;GAAC;GAAY;GAAgB;GAAW,IAAI;GAAM;EAAK,CAAC;EACtE,IAAI,UAAU;GAAC;GAAY;GAAuB;GAAW,IAAI;GAAM;EAAK,CAAC;EAC7E,IAAI,UAAU;GAAC;GAAY;GAAsB;GAAW;GAAW;EAAK,CAAC;EAG7E,IAAI,UAAU;GAAC;GAAY;GAA2B;GAAS;GAAM;EAAK,CAAC;EAC3E,IAAI;GACF,IAAI,UAAU;IAAC;IAAY;IAAa;IAAW;IAAI;GAAK,CAAC;EAC/D,QAAQ,CAER;EAGA,MAAM,MAAM,KAAK,KAAK,WAAW,YAAY,SAAS,SAAS;EAC/D,GAAG,WAAW,KAAK,GAAG,IAAI,MAAM;EAChC,MAAM,MAAM,KAAK,KAAK,QAAQ,YAAY;EAC1C,GAAG,cAAc,KAAK,oBAAoB,UAAU,CAAC;EACrD,IAAI,MAAM;GAAC;GAAM;GAAK;EAAG,CAAC;EAE1B,YAAY,KAAK,WAAW,MAAM;EAKlC,MAAM,SAAS,QAAQ;EACvB,MAAM,UAAU,eAAe,CAAC,kBAAkB,YAAY,IAAI,CAAC;EACnE,MAAM,SAAS,SAAS,CAAC,UAAU,MAAM,IAAI,CAAC,UAAU,GAAG;EAC3D,IAAI,YAAY;GAAC;GAAW,GAAG;GAAQ,GAAG;GAAS,GAAG,IAAI;EAAM,CAAC;EACjE,IAAI,YAAY;GAAC;GAAW;GAAU,GAAG;GAAQ,GAAG;GAAS;EAAS,CAAC;EAGvE,GAAG,OAAO,SAAS;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EACnD,GAAG,WAAW,WAAW,OAAO;EAEhC,OAAO;GAAE;GAAS,QAAQ,SAAS,aAAa;EAAQ;CAC1D,UAAU;EACR,GAAG,OAAO,QAAQ;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAElD,GAAG,OAAO,WAAW;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CACvD;AACF"}

package/lib/{app-B1djcEnN.d.ts → app-MIaByu-I.d.ts}

@@ -1,4 +1,4 @@
-import { n as AppConfig, t as AppBuilderConfig } from "./config-jZAB2Zg8.js";
+import { n as AppConfig, t as AppBuilderConfig } from "./config-1vfbPBRi.js";
 
 //#region src/init/app.d.ts
 /** Inputs for {@link buildApp}. */
@@ -29,4 +29,4 @@ declare function installIcon(app: AppConfig, appPath: string, tmpDir: string): v
 declare function buildApp(opts: BuildAppOptions): BuildAppResult;
 //#endregion
 export { installIcon as a, canBuildApps as i, BuildAppResult as n, buildApp as r, BuildAppOptions as t };
-//# sourceMappingURL=app-B1djcEnN.d.ts.map
+//# sourceMappingURL=app-MIaByu-I.d.ts.map

package/lib/cli.js

@@ -1,8 +1,10 @@
 #!/usr/bin/env node
-import { l as resolveBox, s as loadConfig } from "./config-BQ44iVWT.js";
-import { n as runInit } from "./scaffold-C1tqCL_8.js";
-import { a as runClaude, i as resolveProjectDir, n as generateProfile, r as profilePath } from "./run-yUsOaKFx.js";
+import { f as resolveBox, u as loadConfig } from "./config-CY_Cf87P.js";
+import { a as runClaude, i as resolveProjectDir, n as generateProfile, r as profilePath } from "./run-9vQC2fCs.js";
+import { n as formatInfo, r as gatherInfo } from "./info-BRlaIckk.js";
+import { r as runInit } from "./scaffold-DiG5q28w.js";
 import path from "node:path";
+import { createLogger } from "@lsk4/log";
 import yargs from "yargs";
 import { hideBin } from "yargs/helpers";
 //#region src/cli.ts
@@ -32,9 +34,19 @@ await yargs(hideBin(process.argv)).scriptName("clabox").parserConfiguration({ "u
 }).command("profile", "Print the sandbox profile path (no build)", (y) => y, async (argv) => {
 	const { config } = await loadConfig(explicitConfig(argv));
 	console.log(profilePath(resolveProjectDir(config)));
+}).command("info", "Print clabox/version/box/config diagnostics for the resolved config", (y) => y, async (argv) => {
+	const { config, configFile } = await loadConfig(explicitConfig(argv));
+	const data = gatherInfo(config, {
+		configFile,
+		box: argv.box
+	});
+	const log = createLogger("clabox");
+	log.log(formatInfo(data, { color: Boolean(process.stdout.isTTY) }));
+	if (!data.claudeBin) log.warn("claude binary not found on PATH");
+	if (!data.sandboxExec) log.warn("sandbox-exec not found — clabox needs macOS");
 }).command("init", "Generate clabox-<name> shell aliases and build Ghostty apps for `app` boxes", (y) => y.option("dir", {
 	type: "string",
-	describe: "Base dir holding configs/ and scripts/ (default: ./__)"
+	describe: "Base dir holding configs/ and scripts/ (default: ~/.config/clabox)"
 }).option("apps", {
 	type: "boolean",
 	default: true,
@@ -56,7 +68,7 @@ await yargs(hideBin(process.argv)).scriptName("clabox").parserConfiguration({ "u
 	for (const w of warnings) console.warn(`  ⚠️  ${w}`);
 	console.log(`\nAdd to ~/.zshrc:  source ${indexFile}`);
 	if (raycastCommands.length > 0) console.log(`Add to Raycast (Script Commands dir):  ${path.dirname(raycastCommands[0])}`);
-}).example("$0 run --dangerously-skip-permissions", "YOLO mode inside the sandbox").example("$0 -b ax-root", "Run the ~/.config/clabox/configs/ax-root.config.mjs box").example("$0 init", "Generate shell aliases from __/configs/*.config.mjs").example("$0 --config ./my.clabox.mjs run", "Use a specific JS config file").example("CLAUDE_CONFIG_DIR=~/.claude_work $0 run", "Use a different Claude profile").epilogue([
+}).example("$0 run --dangerously-skip-permissions", "YOLO mode inside the sandbox").example("$0 -b ax-root", "Run the ~/.config/clabox/configs/ax-root.config.mjs box").example("$0 info", "Print version/box/config diagnostics for the resolved config").example("$0 init", "Generate shell aliases from ~/.config/clabox/configs/*.config.mjs").example("$0 --config ./my.clabox.mjs run", "Use a specific JS config file").example("CLAUDE_CONFIG_DIR=~/.claude_work $0 run", "Use a different Claude profile").epilogue([
 	"Config (later wins): defaults -> env vars -> JS config file.",
 	"File: ./clabox.config.mjs or ~/.config/clabox/config.mjs",
 	"(or --config /path, or CLABOX_CONFIG=/path).",

package/lib/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","names":[],"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n// clabox — run Claude Code in a sandbox for super-safe YOLO mode.\n// SPDX-License-Identifier: MIT\n//\n// Configure in plain JS: clabox.config.mjs (CWD) or\n// ~/.config/clabox/config.mjs. See clabox.config.example.mjs.\n\nimport path from 'node:path';\nimport yargs from 'yargs';\nimport { hideBin } from 'yargs/helpers';\nimport { runInit } from './init/scaffold.js';\nimport { generateProfile, profilePath, resolveProjectDir, runClaude } from './sandbox/run.js';\nimport { loadConfig, resolveBox } from './utils/config.js';\n\n/** Pick the explicit config path: a `--box <name>` wins over `--config <path>`. */\n// Index signature so any yargs argv (incl. commands with an empty builder)\n// is assignable — `box`/`config` are global options, present on every command.\nfunction explicitConfig(argv: {\n  box?: unknown;\n  config?: unknown;\n  [k: string]: unknown;\n}): string | undefined {\n  if (argv.box) return resolveBox(argv.box as string);\n  return (argv.config as string | undefined) ?? undefined;\n}\n\nawait yargs(hideBin(process.argv))\n  .scriptName('clabox')\n  // Keep unknown flags (e.g. --dangerously-skip-permissions) as positionals so\n  // they pass straight through to claude instead of erroring out.\n  .parserConfiguration({ 'unknown-options-as-args': true })\n  // clabox-owned flag: a config-file path that wins over CLABOX_CONFIG.\n  .option('config', {\n    type: 'string',\n    describe: 'Path to a JS config file (overrides CLABOX_CONFIG)',\n  })\n  // clabox-owned flag: run a named config from the global configs dir.\n  // (`-p` is left for claude's --print; `-c/-r/-d/-v` are claude flags too.)\n  .option('box', {\n    alias: 'b',\n    type: 'string',\n    describe: 'Run a named config from ~/.config/clabox/configs/<name>.config.mjs',\n  })\n  .command(\n    ['run [claudeArgs..]', '$0 [claudeArgs..]'],\n    'Generate the profile and run claude inside the sandbox (default)',\n    (y) =>\n      y.positional('claudeArgs', {\n        describe: 'Arguments passed through to claude',\n        array: true,\n        default: [] as string[],\n      }),\n    async (argv) => {\n      const { config, configFile } = await loadConfig(explicitConfig(argv));\n      const claudeArgs = (argv.claudeArgs ?? []) as string[];\n      const code = runClaude(config, claudeArgs, { configFile });\n      process.exit(code);\n    },\n  )\n  .command(\n    'generate',\n    'Build the sandbox profile only and print its path',\n    (y) => y,\n    async (argv) => {\n      const { config } = await loadConfig(explicitConfig(argv));\n      console.log(generateProfile(config));\n    },\n  )\n  .command(\n    'profile',\n    'Print the sandbox profile path (no build)',\n    (y) => y,\n    async (argv) => {\n      const { config } = await loadConfig(explicitConfig(argv));\n      console.log(profilePath(resolveProjectDir(config)));\n    },\n  )\n  .command(\n    'init',\n    'Generate clabox-<name> shell aliases and build Ghostty apps for `app` boxes',\n    (y) =>\n      y\n        .option('dir', {\n          type: 'string',\n          describe: 'Base dir holding configs/ and scripts/ (default: ./__)',\n        })\n        .option('apps', {\n          type: 'boolean',\n          default: true,\n          describe: 'Build Ghostty apps for `app` boxes (use --no-apps to skip)',\n        })\n        .option('app', {\n          type: 'string',\n          describe: 'Build only this app box (by box name or app display name)',\n        }),\n    async (argv) => {\n      const { profiles, indexFile, written, apps, raycastCommands, extraFiles, warnings } =\n        await runInit({\n          baseDir: argv.dir as string | undefined,\n          buildApps: argv.apps as boolean,\n          only: (argv.app as string | undefined) ?? null,\n        });\n      console.log(`clabox init: ${profiles.length} profile(s) → ${profiles.join(', ')}`);\n      for (const f of written) console.log(`  ${path.basename(f)}`);\n      for (const f of extraFiles) console.log(`  🔌 ${f}`);\n      for (const a of apps) console.log(`  📦 ${a.appPath} (${a.signed})`);\n      for (const r of raycastCommands) console.log(`  🚀 ${r}`);\n      for (const w of warnings) console.warn(`  ⚠️  ${w}`);\n      console.log(`\\nAdd to ~/.zshrc:  source ${indexFile}`);\n      if (raycastCommands.length > 0) {\n        console.log(`Add to Raycast (Script Commands dir):  ${path.dirname(raycastCommands[0])}`);\n      }\n    },\n  )\n  .example('$0 run --dangerously-skip-permissions', 'YOLO mode inside the sandbox')\n  .example('$0 -b ax-root', 'Run the ~/.config/clabox/configs/ax-root.config.mjs box')\n  .example('$0 init', 'Generate shell aliases from __/configs/*.config.mjs')\n  .example('$0 --config ./my.clabox.mjs run', 'Use a specific JS config file')\n  .example('CLAUDE_CONFIG_DIR=~/.claude_work $0 run', 'Use a different Claude profile')\n  .epilogue(\n    [\n      'Config (later wins): defaults -> env vars -> JS config file.',\n      'File: ./clabox.config.mjs or ~/.config/clabox/config.mjs',\n      '(or --config /path, or CLABOX_CONFIG=/path).',\n      'Named boxes: -b <name> -> ~/.config/clabox/configs/<name>.config.mjs',\n      '(dir overridable via CLABOX_CONFIGS_DIR).',\n    ].join('\\n'),\n  )\n  .version(false)\n  .help()\n  .alias('h', 'help')\n  .fail((msg, err) => {\n    console.error(`Error: ${err?.message ?? msg}`);\n    process.exit(1);\n  })\n  .parseAsync();\n"],"mappings":";;;;;;;;;AAiBA,SAAS,eAAe,MAID;CACrB,IAAI,KAAK,KAAK,OAAO,WAAW,KAAK,GAAa;CAClD,OAAQ,KAAK,UAAiC,KAAA;AAChD;AAEA,MAAM,MAAM,QAAQ,QAAQ,IAAI,CAAC,CAAC,CAC/B,WAAW,QAAQ,CAAC,CAGpB,oBAAoB,EAAE,2BAA2B,KAAK,CAAC,CAAC,CAExD,OAAO,UAAU;CAChB,MAAM;CACN,UAAU;AACZ,CAAC,CAAC,CAGD,OAAO,OAAO;CACb,OAAO;CACP,MAAM;CACN,UAAU;AACZ,CAAC,CAAC,CACD,QACC,CAAC,sBAAsB,mBAAmB,GAC1C,qEACC,MACC,EAAE,WAAW,cAAc;CACzB,UAAU;CACV,OAAO;CACP,SAAS,CAAC;AACZ,CAAC,GACH,OAAO,SAAS;CACd,MAAM,EAAE,QAAQ,eAAe,MAAM,WAAW,eAAe,IAAI,CAAC;CAEpE,MAAM,OAAO,UAAU,QADH,KAAK,cAAc,CAAC,GACG,EAAE,WAAW,CAAC;CACzD,QAAQ,KAAK,IAAI;AACnB,CACF,CAAC,CACA,QACC,YACA,sDACC,MAAM,GACP,OAAO,SAAS;CACd,MAAM,EAAE,WAAW,MAAM,WAAW,eAAe,IAAI,CAAC;CACxD,QAAQ,IAAI,gBAAgB,MAAM,CAAC;AACrC,CACF,CAAC,CACA,QACC,WACA,8CACC,MAAM,GACP,OAAO,SAAS;CACd,MAAM,EAAE,WAAW,MAAM,WAAW,eAAe,IAAI,CAAC;CACxD,QAAQ,IAAI,YAAY,kBAAkB,MAAM,CAAC,CAAC;AACpD,CACF,CAAC,CACA,QACC,QACA,gFACC,MACC,EACG,OAAO,OAAO;CACb,MAAM;CACN,UAAU;AACZ,CAAC,CAAC,CACD,OAAO,QAAQ;CACd,MAAM;CACN,SAAS;CACT,UAAU;AACZ,CAAC,CAAC,CACD,OAAO,OAAO;CACb,MAAM;CACN,UAAU;AACZ,CAAC,GACL,OAAO,SAAS;CACd,MAAM,EAAE,UAAU,WAAW,SAAS,MAAM,iBAAiB,YAAY,aACvE,MAAM,QAAQ;EACZ,SAAS,KAAK;EACd,WAAW,KAAK;EAChB,MAAO,KAAK,OAA8B;CAC5C,CAAC;CACH,QAAQ,IAAI,gBAAgB,SAAS,OAAO,gBAAgB,SAAS,KAAK,IAAI,GAAG;CACjF,KAAK,MAAM,KAAK,SAAS,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC,GAAG;CAC5D,KAAK,MAAM,KAAK,YAAY,QAAQ,IAAI,QAAQ,GAAG;CACnD,KAAK,MAAM,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,QAAQ,IAAI,EAAE,OAAO,EAAE;CACnE,KAAK,MAAM,KAAK,iBAAiB,QAAQ,IAAI,QAAQ,GAAG;CACxD,KAAK,MAAM,KAAK,UAAU,QAAQ,KAAK,SAAS,GAAG;CACnD,QAAQ,IAAI,8BAA8B,WAAW;CACrD,IAAI,gBAAgB,SAAS,GAC3B,QAAQ,IAAI,0CAA0C,KAAK,QAAQ,gBAAgB,EAAE,GAAG;AAE5F,CACF,CAAC,CACA,QAAQ,yCAAyC,8BAA8B,CAAC,CAChF,QAAQ,iBAAiB,yDAAyD,CAAC,CACnF,QAAQ,WAAW,qDAAqD,CAAC,CACzE,QAAQ,mCAAmC,+BAA+B,CAAC,CAC3E,QAAQ,2CAA2C,gCAAgC,CAAC,CACpF,SACC;CACE;CACA;CACA;CACA;CACA;AACF,CAAC,CAAC,KAAK,IAAI,CACb,CAAC,CACA,QAAQ,KAAK,CAAC,CACd,KAAK,CAAC,CACN,MAAM,KAAK,MAAM,CAAC,CAClB,MAAM,KAAK,QAAQ;CAClB,QAAQ,MAAM,UAAU,KAAK,WAAW,KAAK;CAC7C,QAAQ,KAAK,CAAC;AAChB,CAAC,CAAC,CACD,WAAW"}
+{"version":3,"file":"cli.js","names":[],"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n// clabox — run Claude Code in a sandbox for super-safe YOLO mode.\n// SPDX-License-Identifier: MIT\n//\n// Configure in plain JS: clabox.config.mjs (CWD) or\n// ~/.config/clabox/config.mjs. See clabox.config.example.mjs.\n\nimport path from 'node:path';\nimport { createLogger } from '@lsk4/log';\nimport yargs from 'yargs';\nimport { hideBin } from 'yargs/helpers';\nimport { formatInfo, gatherInfo } from './info/info.js';\nimport { runInit } from './init/scaffold.js';\nimport { generateProfile, profilePath, resolveProjectDir, runClaude } from './sandbox/run.js';\nimport { loadConfig, resolveBox } from './utils/config.js';\n\n/** Pick the explicit config path: a `--box <name>` wins over `--config <path>`. */\n// Index signature so any yargs argv (incl. commands with an empty builder)\n// is assignable — `box`/`config` are global options, present on every command.\nfunction explicitConfig(argv: {\n  box?: unknown;\n  config?: unknown;\n  [k: string]: unknown;\n}): string | undefined {\n  if (argv.box) return resolveBox(argv.box as string);\n  return (argv.config as string | undefined) ?? undefined;\n}\n\nawait yargs(hideBin(process.argv))\n  .scriptName('clabox')\n  // Keep unknown flags (e.g. --dangerously-skip-permissions) as positionals so\n  // they pass straight through to claude instead of erroring out.\n  .parserConfiguration({ 'unknown-options-as-args': true })\n  // clabox-owned flag: a config-file path that wins over CLABOX_CONFIG.\n  .option('config', {\n    type: 'string',\n    describe: 'Path to a JS config file (overrides CLABOX_CONFIG)',\n  })\n  // clabox-owned flag: run a named config from the global configs dir.\n  // (`-p` is left for claude's --print; `-c/-r/-d/-v` are claude flags too.)\n  .option('box', {\n    alias: 'b',\n    type: 'string',\n    describe: 'Run a named config from ~/.config/clabox/configs/<name>.config.mjs',\n  })\n  .command(\n    ['run [claudeArgs..]', '$0 [claudeArgs..]'],\n    'Generate the profile and run claude inside the sandbox (default)',\n    (y) =>\n      y.positional('claudeArgs', {\n        describe: 'Arguments passed through to claude',\n        array: true,\n        default: [] as string[],\n      }),\n    async (argv) => {\n      const { config, configFile } = await loadConfig(explicitConfig(argv));\n      const claudeArgs = (argv.claudeArgs ?? []) as string[];\n      const code = runClaude(config, claudeArgs, { configFile });\n      process.exit(code);\n    },\n  )\n  .command(\n    'generate',\n    'Build the sandbox profile only and print its path',\n    (y) => y,\n    async (argv) => {\n      const { config } = await loadConfig(explicitConfig(argv));\n      console.log(generateProfile(config));\n    },\n  )\n  .command(\n    'profile',\n    'Print the sandbox profile path (no build)',\n    (y) => y,\n    async (argv) => {\n      const { config } = await loadConfig(explicitConfig(argv));\n      console.log(profilePath(resolveProjectDir(config)));\n    },\n  )\n  .command(\n    'info',\n    'Print clabox/version/box/config diagnostics for the resolved config',\n    (y) => y,\n    async (argv) => {\n      const { config, configFile } = await loadConfig(explicitConfig(argv));\n      const data = gatherInfo(config, { configFile, box: argv.box as string | undefined });\n      const log = createLogger('clabox');\n      // `.log` is the raw passthrough — keeps the aligned table intact (vs. the\n      // per-line `ℹ clabox` prefix of `.info`); colorize only for a real TTY.\n      log.log(formatInfo(data, { color: Boolean(process.stdout.isTTY) }));\n      // Surface a hard blocker as a real warn (clabox can't run without these).\n      if (!data.claudeBin) log.warn('claude binary not found on PATH');\n      if (!data.sandboxExec) log.warn('sandbox-exec not found — clabox needs macOS');\n    },\n  )\n  .command(\n    'init',\n    'Generate clabox-<name> shell aliases and build Ghostty apps for `app` boxes',\n    (y) =>\n      y\n        .option('dir', {\n          type: 'string',\n          describe: 'Base dir holding configs/ and scripts/ (default: ~/.config/clabox)',\n        })\n        .option('apps', {\n          type: 'boolean',\n          default: true,\n          describe: 'Build Ghostty apps for `app` boxes (use --no-apps to skip)',\n        })\n        .option('app', {\n          type: 'string',\n          describe: 'Build only this app box (by box name or app display name)',\n        }),\n    async (argv) => {\n      const { profiles, indexFile, written, apps, raycastCommands, extraFiles, warnings } =\n        await runInit({\n          baseDir: argv.dir as string | undefined,\n          buildApps: argv.apps as boolean,\n          only: (argv.app as string | undefined) ?? null,\n        });\n      console.log(`clabox init: ${profiles.length} profile(s) → ${profiles.join(', ')}`);\n      for (const f of written) console.log(`  ${path.basename(f)}`);\n      for (const f of extraFiles) console.log(`  🔌 ${f}`);\n      for (const a of apps) console.log(`  📦 ${a.appPath} (${a.signed})`);\n      for (const r of raycastCommands) console.log(`  🚀 ${r}`);\n      for (const w of warnings) console.warn(`  ⚠️  ${w}`);\n      console.log(`\\nAdd to ~/.zshrc:  source ${indexFile}`);\n      if (raycastCommands.length > 0) {\n        console.log(`Add to Raycast (Script Commands dir):  ${path.dirname(raycastCommands[0])}`);\n      }\n    },\n  )\n  .example('$0 run --dangerously-skip-permissions', 'YOLO mode inside the sandbox')\n  .example('$0 -b ax-root', 'Run the ~/.config/clabox/configs/ax-root.config.mjs box')\n  .example('$0 info', 'Print version/box/config diagnostics for the resolved config')\n  .example('$0 init', 'Generate shell aliases from ~/.config/clabox/configs/*.config.mjs')\n  .example('$0 --config ./my.clabox.mjs run', 'Use a specific JS config file')\n  .example('CLAUDE_CONFIG_DIR=~/.claude_work $0 run', 'Use a different Claude profile')\n  .epilogue(\n    [\n      'Config (later wins): defaults -> env vars -> JS config file.',\n      'File: ./clabox.config.mjs or ~/.config/clabox/config.mjs',\n      '(or --config /path, or CLABOX_CONFIG=/path).',\n      'Named boxes: -b <name> -> ~/.config/clabox/configs/<name>.config.mjs',\n      '(dir overridable via CLABOX_CONFIGS_DIR).',\n    ].join('\\n'),\n  )\n  .version(false)\n  .help()\n  .alias('h', 'help')\n  .fail((msg, err) => {\n    console.error(`Error: ${err?.message ?? msg}`);\n    process.exit(1);\n  })\n  .parseAsync();\n"],"mappings":";;;;;;;;;;;AAmBA,SAAS,eAAe,MAID;CACrB,IAAI,KAAK,KAAK,OAAO,WAAW,KAAK,GAAa;CAClD,OAAQ,KAAK,UAAiC,KAAA;AAChD;AAEA,MAAM,MAAM,QAAQ,QAAQ,IAAI,CAAC,CAAC,CAC/B,WAAW,QAAQ,CAAC,CAGpB,oBAAoB,EAAE,2BAA2B,KAAK,CAAC,CAAC,CAExD,OAAO,UAAU;CAChB,MAAM;CACN,UAAU;AACZ,CAAC,CAAC,CAGD,OAAO,OAAO;CACb,OAAO;CACP,MAAM;CACN,UAAU;AACZ,CAAC,CAAC,CACD,QACC,CAAC,sBAAsB,mBAAmB,GAC1C,qEACC,MACC,EAAE,WAAW,cAAc;CACzB,UAAU;CACV,OAAO;CACP,SAAS,CAAC;AACZ,CAAC,GACH,OAAO,SAAS;CACd,MAAM,EAAE,QAAQ,eAAe,MAAM,WAAW,eAAe,IAAI,CAAC;CAEpE,MAAM,OAAO,UAAU,QADH,KAAK,cAAc,CAAC,GACG,EAAE,WAAW,CAAC;CACzD,QAAQ,KAAK,IAAI;AACnB,CACF,CAAC,CACA,QACC,YACA,sDACC,MAAM,GACP,OAAO,SAAS;CACd,MAAM,EAAE,WAAW,MAAM,WAAW,eAAe,IAAI,CAAC;CACxD,QAAQ,IAAI,gBAAgB,MAAM,CAAC;AACrC,CACF,CAAC,CACA,QACC,WACA,8CACC,MAAM,GACP,OAAO,SAAS;CACd,MAAM,EAAE,WAAW,MAAM,WAAW,eAAe,IAAI,CAAC;CACxD,QAAQ,IAAI,YAAY,kBAAkB,MAAM,CAAC,CAAC;AACpD,CACF,CAAC,CACA,QACC,QACA,wEACC,MAAM,GACP,OAAO,SAAS;CACd,MAAM,EAAE,QAAQ,eAAe,MAAM,WAAW,eAAe,IAAI,CAAC;CACpE,MAAM,OAAO,WAAW,QAAQ;EAAE;EAAY,KAAK,KAAK;CAA0B,CAAC;CACnF,MAAM,MAAM,aAAa,QAAQ;CAGjC,IAAI,IAAI,WAAW,MAAM,EAAE,OAAO,QAAQ,QAAQ,OAAO,KAAK,EAAE,CAAC,CAAC;CAElE,IAAI,CAAC,KAAK,WAAW,IAAI,KAAK,iCAAiC;CAC/D,IAAI,CAAC,KAAK,aAAa,IAAI,KAAK,6CAA6C;AAC/E,CACF,CAAC,CACA,QACC,QACA,gFACC,MACC,EACG,OAAO,OAAO;CACb,MAAM;CACN,UAAU;AACZ,CAAC,CAAC,CACD,OAAO,QAAQ;CACd,MAAM;CACN,SAAS;CACT,UAAU;AACZ,CAAC,CAAC,CACD,OAAO,OAAO;CACb,MAAM;CACN,UAAU;AACZ,CAAC,GACL,OAAO,SAAS;CACd,MAAM,EAAE,UAAU,WAAW,SAAS,MAAM,iBAAiB,YAAY,aACvE,MAAM,QAAQ;EACZ,SAAS,KAAK;EACd,WAAW,KAAK;EAChB,MAAO,KAAK,OAA8B;CAC5C,CAAC;CACH,QAAQ,IAAI,gBAAgB,SAAS,OAAO,gBAAgB,SAAS,KAAK,IAAI,GAAG;CACjF,KAAK,MAAM,KAAK,SAAS,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC,GAAG;CAC5D,KAAK,MAAM,KAAK,YAAY,QAAQ,IAAI,QAAQ,GAAG;CACnD,KAAK,MAAM,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,QAAQ,IAAI,EAAE,OAAO,EAAE;CACnE,KAAK,MAAM,KAAK,iBAAiB,QAAQ,IAAI,QAAQ,GAAG;CACxD,KAAK,MAAM,KAAK,UAAU,QAAQ,KAAK,SAAS,GAAG;CACnD,QAAQ,IAAI,8BAA8B,WAAW;CACrD,IAAI,gBAAgB,SAAS,GAC3B,QAAQ,IAAI,0CAA0C,KAAK,QAAQ,gBAAgB,EAAE,GAAG;AAE5F,CACF,CAAC,CACA,QAAQ,yCAAyC,8BAA8B,CAAC,CAChF,QAAQ,iBAAiB,yDAAyD,CAAC,CACnF,QAAQ,WAAW,8DAA8D,CAAC,CAClF,QAAQ,WAAW,mEAAmE,CAAC,CACvF,QAAQ,mCAAmC,+BAA+B,CAAC,CAC3E,QAAQ,2CAA2C,gCAAgC,CAAC,CACpF,SACC;CACE;CACA;CACA;CACA;CACA;AACF,CAAC,CAAC,KAAK,IAAI,CACb,CAAC,CACA,QAAQ,KAAK,CAAC,CACd,KAAK,CAAC,CACN,MAAM,KAAK,MAAM,CAAC,CAClB,MAAM,KAAK,QAAQ;CAClB,QAAQ,MAAM,UAAU,KAAK,WAAW,KAAK;CAC7C,QAAQ,KAAK,CAAC;AAChB,CAAC,CAAC,CACD,WAAW"}

package/lib/{config-jZAB2Zg8.d.ts → config-1vfbPBRi.d.ts}

@@ -40,7 +40,7 @@ interface AppBuilderConfig {
   signId: string | null;
   /** Optional base Ghostty config emitted as a leading `config-file = …`. */
   baseGhosttyConfig: string | null;
-  /** `clabox` binary baked into the generated `command`. null → autodetect. */
+  /** Absolute `clabox` path to pin in the generated `command`. null → bare `clabox` (PATH-resolved at launch). */
   claboxBin: string | null;
 }
 /**
@@ -56,13 +56,32 @@ interface McpServer {
   url?: string;
   headers?: Record<string, string>;
 }
+/** A single hook command — one entry in claude's settings.json hook list. */
+interface HookCommand {
+  type: 'command';
+  /** Shell command to run (e.g. an absolute path to a script). */
+  command: string;
+  /** Optional per-command timeout in seconds. */
+  timeout?: number;
+}
+/** A matcher group under a hook event. */
+interface HookMatcher {
+  /** Tool-name matcher for `PreToolUse`/`PostToolUse`; omit for `Stop`/`Notification`/… */
+  matcher?: string;
+  hooks: HookCommand[];
+}
+/**
+ * Per-box hooks, mirroring claude's settings.json `hooks` map: an event name
+ * (`Stop`, `Notification`, `PreToolUse`, …) → its matcher groups.
+ */
+type HooksConfig = Record<string, HookMatcher[]>;
 /** Extra rules layered on top of the built-in base profile. */
 interface PathRules {
   /** RW subpaths (beyond project dir + configDir + /tmp). */
   readWrite: string[];
   /** RO subpaths. */
   readOnly: string[];
-  /** process-exec subpaths. */
+  /** process-exec subpaths (e.g. a hook-scripts dir so `config.hooks` can run). */
   exec: string[];
   /** explicit deny subpaths (read + write). */
   deny: string[];
@@ -83,7 +102,8 @@ interface Config {
   claudeArgs: string[];
   /**
    * Per-box MCP servers (the `mcpServers` map). clabox compiles them to
-   * `<configDir>/mcp/<slug>.json` and launches claude with
+   * `<claboxHome>/mcp/<slug>.json` (i.e. `~/.config/clabox/mcp/…`, NOT the
+   * Claude configDir) and launches claude with
    * `--strict-mcp-config --mcp-config <file>`, so a shared configDir's global /
    * plugin MCP servers are ignored — each box gets exactly these and no more.
    * Materialized on every `run` and during `init`. Absent → no MCP flags.
@@ -95,6 +115,15 @@ interface Config {
    * sharing one configDir (the user-level CLAUDE.md is shared; this is not).
    */
   systemPrompt?: string | string[];
+  /**
+   * Per-box hooks (claude's settings.json `hooks` map). clabox merges them into
+   * a settings JSON written to `<claboxHome>/settings/<slug>.json` (i.e.
+   * `~/.config/clabox/settings/…`, NOT the Claude configDir) and launches
+   * claude with `--settings <file>` — merging (not clobbering) any inline
+   * `--settings` already in `claudeArgs`, so `includeCoAuthoredBy` survives.
+   * Materialized on every `run` and during `init`. Absent → no settings flag.
+   */
+  hooks?: HooksConfig;
   bot: BotConfig;
   /**
    * Extra environment variables forced onto the sandboxed `claude` process,
@@ -106,8 +135,6 @@ interface Config {
   network: boolean;
   /** Cap the process table inside the sandbox (fork-bomb guard). 0 → skip. */
   ulimitProcs: number;
-  /** Extra directory granted read + execute inside the sandbox. null → disabled. */
-  hooksDir: string | null;
   paths: PathRules;
   /** Home subdirectories denied entirely (read + write). */
   denyHome: string[];
@@ -135,6 +162,18 @@ declare function findConfigFile(explicit?: string | null): string | null;
  * the `clabox --box <name>` / `-b` flag. Override with `CLABOX_CONFIGS_DIR`.
  */
 declare function configsDir(): string;
+/**
+ * Clabox's own home dir — the parent of {@link configsDir} (default
+ * `~/.config/clabox`, honoring `CLABOX_CONFIGS_DIR`). Holds clabox-owned
+ * generated artifacts (`scripts/`, `ghostty/`, `apps/`) and the per-box extras
+ * compiled by `buildBoxExtras` (`mcp/`, `settings/`). Deliberately kept OUT of
+ * Claude's `configDir` so clabox never pollutes Claude's own profile dir.
+ */
+declare function claboxHomeDir(): string;
+/** `<claboxHome>/mcp` — per-box compiled `--mcp-config` json lives here. */
+declare function claboxMcpDir(): string;
+/** `<claboxHome>/settings` — per-box compiled `--settings` (hooks) json lives here. */
+declare function claboxSettingsDir(): string;
 /** Named box configs (sorted, de-duplicated) available in {@link configsDir}. */
 declare function listBoxes(dir?: string): string[];
 /**
@@ -157,5 +196,5 @@ interface LoadedConfig {
  */
 declare function loadConfig(explicitConfig?: string | null): Promise<LoadedConfig>;
 //#endregion
-export { HOME as a, PathRules as c, expandHome as d, findConfigFile as f, resolveBox as g, mergeConfig as h, Config as i, configsDir as l, loadConfig as m, AppConfig as n, LoadedConfig as o, listBoxes as p, BotConfig as r, McpServer as s, AppBuilderConfig as t, defaultConfig as u };
-//# sourceMappingURL=config-jZAB2Zg8.d.ts.map
+export { resolveBox as S, expandHome as _, HOME as a, loadConfig as b, HooksConfig as c, PathRules as d, claboxHomeDir as f, defaultConfig as g, configsDir as h, Config as i, LoadedConfig as l, claboxSettingsDir as m, AppConfig as n, HookCommand as o, claboxMcpDir as p, BotConfig as r, HookMatcher as s, AppBuilderConfig as t, McpServer as u, findConfigFile as v, mergeConfig as x, listBoxes as y };
+//# sourceMappingURL=config-1vfbPBRi.d.ts.map

package/lib/{config-BQ44iVWT.js → config-CY_Cf87P.js}

@@ -1,7 +1,7 @@
 import path from "node:path";
 import fs from "node:fs";
-import os from "node:os";
 import { pathToFileURL } from "node:url";
+import os from "node:os";
 //#region src/utils/config.ts
 const HOME = os.homedir();
 /** Expand a leading `~` / `~/` to the user's home directory. */
@@ -26,7 +26,6 @@ const defaultConfig = {
 	env: {},
 	network: true,
 	ulimitProcs: 1024,
-	hooksDir: env.CLABOX_HOOKS_DIR ?? null,
 	paths: {
 		readWrite: [],
 		readOnly: [],
@@ -94,6 +93,24 @@ function findConfigFile(explicit) {
 function configsDir() {
 	return expandHome(env.CLABOX_CONFIGS_DIR ?? "~/.config/clabox/configs");
 }
+/**
+* Clabox's own home dir — the parent of {@link configsDir} (default
+* `~/.config/clabox`, honoring `CLABOX_CONFIGS_DIR`). Holds clabox-owned
+* generated artifacts (`scripts/`, `ghostty/`, `apps/`) and the per-box extras
+* compiled by `buildBoxExtras` (`mcp/`, `settings/`). Deliberately kept OUT of
+* Claude's `configDir` so clabox never pollutes Claude's own profile dir.
+*/
+function claboxHomeDir() {
+	return path.dirname(configsDir());
+}
+/** `<claboxHome>/mcp` — per-box compiled `--mcp-config` json lives here. */
+function claboxMcpDir() {
+	return path.join(claboxHomeDir(), "mcp");
+}
+/** `<claboxHome>/settings` — per-box compiled `--settings` (hooks) json lives here. */
+function claboxSettingsDir() {
+	return path.join(claboxHomeDir(), "settings");
+}
 const BOX_SUFFIXES = [".config.mjs", ".mjs"];
 /** Candidate file paths for a box name, in resolution order. */
 function boxCandidates(name, dir) {
@@ -150,6 +167,6 @@ async function loadConfig(explicitConfig) {
 	};
 }
 //#endregion
-export { findConfigFile as a, mergeConfig as c, expandHome as i, resolveBox as l, configsDir as n, listBoxes as o, defaultConfig as r, loadConfig as s, HOME as t };
+export { configsDir as a, findConfigFile as c, mergeConfig as d, resolveBox as f, claboxSettingsDir as i, listBoxes as l, claboxHomeDir as n, defaultConfig as o, claboxMcpDir as r, expandHome as s, HOME as t, loadConfig as u };
 
-//# sourceMappingURL=config-BQ44iVWT.js.map
+//# sourceMappingURL=config-CY_Cf87P.js.map