instabox 0.4.0 → 0.4.1

package/README.md

@@ -29,6 +29,6 @@ npx --package=./instabox-0.4.0.tgz instabox --help
 
 ## Release
 
-Bump `version` in `package.json`, merge, then push a tag `npm-v<version>` (for example `git tag npm-v0.4.1 && git push origin npm-v0.4.1`). [`npm-release.yml`](../.github/workflows/npm-release.yml) checks the tag against `package.json`, runs the tests and publishes through npm trusted publishing, so there is no npm token anywhere. A version with a `-` (`0.5.0-rc.1`) goes to the `next` dist-tag, never to `latest`.
+Bump `version` in `package.json` and merge that to `main`. [`npm-release.yml`](../.github/workflows/npm-release.yml) publishes when the merged commit is the one that changed the version: it runs the tests, publishes through npm trusted publishing (so there is no npm token anywhere), then tags the commit `npm-v<version>`. Nothing to tag or push by hand, and anyone who can merge can release - npm maintainer access is not needed. A version with a `-` (`0.5.0-rc.1`) goes to the `next` dist-tag, never to `latest`. If a publish fails after its merge, re-run the workflow from the Actions tab; it does nothing when the version is already on the registry.
 
 The trusted publisher is set on npmjs.com, package `instabox` → Settings → Trusted Publisher: GitHub Actions, `InsForge` / `instabox` / `npm-release.yml`. The very first publish, before the package existed, was by hand with `npm publish --access public` from this directory.

package/bin/instabox.mjs

@@ -184,9 +184,8 @@ async function waitOp(op) {
   return op;
 }
 
-const LISTED = Symbol('listed');
-
-// The box to enter, null for a new one, or LISTED when there is no terminal to ask which one.
+// The box to enter, null for a new one, or { listed: <name> } when there is no terminal to ask
+// which one; the name is the box the list puts first, so the hint below is ready to paste.
 async function chooseBox() {
   const { machines = [] } = await client
     .call('GET', '/v1/machines?limit=100')
@@ -203,7 +202,7 @@ async function chooseBox() {
       `    ${ask ? `${i + 1}) ` : ''}${b.name.padEnd(w)}  ${b.state.padEnd(9)} ${dim(`${b.template?.id || ''}  created ${new Date(b.createdAt).toLocaleString()}`)}`,
     ),
   );
-  if (!ask) return LISTED;
+  if (!ask) return { listed: boxes[0].name };
   console.log(`    ${boxes.length + 1}) ${green('+ new box')}`);
   const rl = createInterface({ input: process.stdin, output: process.stdout });
   try {
@@ -237,7 +236,7 @@ async function newBox() {
   const named = images.filter((i) => i.name === IMAGE || i.id === IMAGE);
   const img = named.find((i) => i.official) || named[0];
   const body = {
-    name: `demo-${randomBytes(3).toString('hex')}`,
+    name: `box-${randomBytes(3).toString('hex')}`,
     desiredState: 'running',
   };
   if (img) body.imageId = img.id;
@@ -260,7 +259,7 @@ async function ensureCli() {
 }
 
 // Agent skills shipped in this package (skills/<name>/SKILL.md) into the folders coding agents
-// read. Overwrites only copies we installed earlier (marked `installed-by: instabox-demo`).
+// read. Overwrites only copies we installed earlier (marked `installed-by: instabox`).
 function installSkills() {
   if (process.argv.includes('--no-skills')) return null;
   const src = join(dirname(fileURLToPath(import.meta.url)), '..', 'skills');
@@ -276,7 +275,7 @@ function installSkills() {
     for (const n of names) {
       const dest = join(root, n, 'SKILL.md');
       try {
-        if (existsSync(dest) && !readFileSync(dest, 'utf8').includes('installed-by: instabox-demo')) continue;
+        if (existsSync(dest) && !readFileSync(dest, 'utf8').includes('installed-by: instabox')) continue;
         mkdirSync(join(root, n), { recursive: true });
         writeFileSync(dest, readFileSync(join(src, n, 'SKILL.md')));
         done.add(n);
@@ -307,10 +306,10 @@ async function sh() {
 
   const cli = ensureCli();
   const picked = await chooseBox();
-  if (picked === LISTED) {
+  if (picked?.listed) {
     await reportInstalls(cli);
     console.log(
-      `\n  Which box? ${bold('npx instabox@latest --box NAME')} enters one, ${bold('instabox create --name NAME')} starts a new one.\n`,
+      `\n  Which box? ${bold(`npx instabox@latest --box ${picked.listed}`)} enters it, ${bold('instabox create --name NAME')} starts a new one.\n`,
     );
     return;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instabox",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "A cloud box for your coding agent, the instabox CLI and its agent skills in one command: npx instabox@latest",
   "type": "module",
   "bin": {

package/skills/instabox/SKILL.md

@@ -2,7 +2,7 @@
 name: instabox
 description: Use when the user wants a cloud Linux box (instabox sandbox) from the terminal with the `instabox` CLI — create one, SSH in, run a command in it, read its files, set its timeout, or delete it. For saving or restoring a box's disks, see instabox-snapshots.
 metadata:
-  installed-by: instabox-demo
+  installed-by: instabox
 ---
 
 # instabox CLI

package/skills/instabox-migrate/SKILL.md

@@ -2,7 +2,7 @@
 name: instabox-migrate
 description: Use when the user wants to move their local project or setup onto instabox — "move my setup to instabox", "migrate this repo to a box", "continue this work in the cloud". Copies the current git repo (uncommitted and untracked work included, .gitignored files left out) and its Claude Code / Codex conversation history into a new box, then installs dependencies there until it builds.
 metadata:
-  installed-by: instabox-demo
+  installed-by: instabox
 ---
 
 # Move a local project to instabox

package/skills/instabox-snapshots/SKILL.md

@@ -2,7 +2,7 @@
 name: instabox-snapshots
 description: Use when the user wants to save an instabox box's state and load it later — "save a snapshot", "checkpoint this box", "restore/load from a snapshot", "start a new box from my setup", "clone this box". Covers instabox snapshot save/ls/files/rm, create --snapshot and fork.
 metadata:
-  installed-by: instabox-demo
+  installed-by: instabox
 ---
 
 # instabox snapshots: save and load