Cloud/container support: full ox experience for ephemeral coding environments

[rsnodgrass]

Summary

Cloud-based coding environments (e.g., Claude Code cloud, OpenClaw) run in ephemeral Linux containers where ox isn't installed. Currently, startup hooks fail with ox: command not found. This issue tracks the full cloud experience beyond the initial read-only team context work.

Context

Initial work (in progress on ryan/ox-session-start):

• SAGEOX_TOKEN env var for non-interactive auth
• HTTP-based team context fetch during ox agent prime (no git/daemon required)
• New API endpoint: GET /api/v1/teams/{team_id}/context

Remaining Work

Phase 1: Backend API

• Implement GET /api/v1/teams/{team_id}/context endpoint (serves team docs, AGENTS.md, CLAUDE.md, MEMORY.md as JSON)
• Auth: require Bearer token, check team membership

Phase 2: Session Recording

• Session recording without git (ox session start/stop via HTTP API upload)
• LFS upload via HTTP API (currently requires git-lfs or GitLab API)

Phase 3: Container Bootstrap

• ox cloud bootstrap command or --cloud flag on ox agent prime
• Static binary distribution (direct download URL, no tar required)
• Container setup documentation/scripts for common platforms

Phase 4: Broader Agent Support

• OpenClaw session integration
• Non-Claude agent support in cloud environments
• Automated session capture for headless/CI coding sessions

Key Constraints

• Containers are extremely minimal (may lack head, git, curl)
• ox builds static binaries (CGO_ENABLED=0) — no dynamic dependencies
• Auth must work non-interactively (env var token, no browser)
• Team context needs to be served over HTTP (no git clone)
• Daemon is not available in ephemeral containers

Design Principle

Keep the "secret sauce" in cloud APIs — the container just needs the ox binary and a token.

[rsnodgrass]

Implementation notes from codebase review (March 2026)

What's already implemented:

• Headless detection: internal/cli/output.go:62-83 — IsHeadless() detects SSH sessions and missing display servers. Tested in internal/cli/headless_test.go
• Non-interactive mode: internal/cli/output.go:46-60 — SetNoInteractive()/IsInteractive() + --no-interactive flag suppresses spinners/TUI
• Browser fallback: Returns ErrHeadless when cli.OpenInBrowser() is called in headless environments
• Static binaries: Build uses CGO_ENABLED=0 — no dynamic dependencies, container-friendly

What's NOT implemented:

• SAGEOX_TOKEN env var auth — blocked on SAGEOX_TOKEN env var: team context access without interactive login #103 (no code on main)
• HTTP-based team context fetch (GET /api/v1/teams/{team_id}/context) — not merged
• Session recording without git (HTTP API upload)
• ox cloud bootstrap command
• Container distribution (static binary download URL)

Dependency chain: This issue depends on #103 for the auth foundation. Phases 2-4 in the issue body are independent of #103.