claude-hdb 7d33ad8a00 feat: make the command surface a table, add rename and an escape hatch ... Every incus verb is a candidate feature request, and wrapping them one at a time grows a worse incus. This lands the rule instead: claudebox owns a command when it must enforce an invariant incus cannot see — the user.claudebox=1 boundary, the isolation stack, or the creds-free snapshot workflow. Everything else is incus's job, and now has a door. - CMDS table: one row per command, carrying synopsis, preconditions, summary, action and success message. Dispatch AND help are rendered from it, so the help can no longer describe a command that doesn't exist — the drift that produced #8 is now impossible, not merely fixed. - rename, via a table row: it needs the box stopped (incus won't rename a running instance), so it says so instead of leaking an incus error. - `claudebox incus <box> -- <args...>`: the escape hatch. Box resolved and tag-checked, rest passed to incus verbatim, {} substituted, command echoed. Warns when it can move a box off the isolation stack. - The boundary is now ENFORCED, not assumed: every box-taking command resolves through the user.claudebox=1 tag, so claudebox will not stop, rename or delete an instance it didn't mint. - The rule, written into docs/claudebox-design.md. Closes #11		2026-07-13 20:49:46 +00:00
..
claudebox-design.md	feat: make the command surface a table, add rename and an escape hatch	2026-07-13 20:49:46 +00:00
claudebox-recipe.md	Import claudebox: creds-free, trust-less Claude Code VMs	2026-07-10 15:00:36 +00:00