[cdalar]

Rollout step 4 of docs/plans/boxes-provider.md: boxctl's Claude Code plugin moves to claude-plugin/ as onctl.

/plugin marketplace add cdalar/onctl
/plugin install onctl@onctl
/onctl:on [--mode session|project|exec] [--workspace sync|copy|git|none] ...
/onctl:status   /onctl:off   /onctl:handoff [note]

What changed in the helper (bin/onctl-claude) — it now drives onctl instead of boxctl:

• Finding and managing boxes: onctl ls -p boxes -o json (via jq, independent of table layout), onctl create / resume / destroy. The stored --size becomes onctl's --type.
• Reaching a box: plain ssh with onctl ssh-proxy -p boxes as its ProxyCommand, replacing boxctl's background port-forward process and its pid/port files. A shared master connection still makes each sync a single round trip. Keepalives let a master from before a pause give way, and there's one retry when ssh itself (not the command) failed.
• Commands: the 5-minute limit now runs on the box with timeout. Exit codes pass through, and ssh's own "mux_client" noise is filtered from the command's stderr.
• Exec mode: creates and destroys a box per command itself, since onctl has no exec command.
• No more leaked boxes: a session box whose workspace setup fails is now destroyed instead of left behind.
• The ssh key is shared with onctl claude; boxctl's existing key is reused, so boxes either tool set up work with both.

Hooks, slash commands and the skill are renamed. Commands starting with onctl (or boxctl , or a # local line) stay local.

Tested live, against boxctl.io (every box destroyed afterwards):

• Session mode with sync:
  • the hook rewrote a Bash call;
  • the command ran on the box and the file it wrote synced back;
  • the git-ignored node_modules stayed local and wasn't deleted;
  • the working directory carried over;
  • exit code 7 passed through;
  • a 3s timeout stopped sleep 10;
  • off destroyed the box.
• Exec mode: a fresh box ran the command and was destroyed, in 4.9s, with exit code 3 passed through.
• Project mode across a pause: the next command resumed the box and succeeded, after about 18s while the stale connection timed out.

Bugs found and fixed while testing:

• the state directory wasn't created when reusing boxctl's key, so ssh's ControlPath failed;
• exec mode's random name pipeline hit SIGPIPE under pipefail;
• the session-box leak above.

bash -n and shellcheck are clean; the JSON files validate.

Not tested: the plugin loaded inside a real Claude Code session (the hooks were exercised directly), and /onctl:handoff, which calls onctl claude --handoff.

After this merges, step 5 retires boxctl, including its own copy of the plugin.

🤖 Generated with Claude Code

https://claude.ai/code/session_01U8g3mHkS6JmtYVYc4AjcV4