Reapply "fix: suppress macOS xattrs in archive sync"

This reverts commit 8b7898e1ba.

CHANGELOG.md

@@ -20,6 +20,7 @@
 - Fixed AWS Windows WSL2 mode overrides so they refresh the default instance type to a nested-virtualization-capable family. Thanks @steipete.
 - Fixed AWS Windows WSL2 runs so mode overrides also refresh the default work root to `/work/crabbox` and sync via a WSL archive stream instead of rsync's remote protocol through Windows OpenSSH.
 - Fixed remote git seeding so an unfetchable local commit cannot leave an empty `.git` worktree that makes sync sanity report every tracked file as deleted.
+- Fixed Windows archive sync from macOS so Apple extended attributes do not spam remote tar warnings.
 
 ## 0.5.0 - 2026-05-04
 

internal/cli/sync_windows_target.go

@@ -4,6 +4,7 @@ import (
 	"bytes"
 	"context"
 	"fmt"
+	"os"
 	"os/exec"
 	"time"
 )
@@ -21,6 +22,7 @@ func syncWindowsNative(ctx context.Context, target SSHTarget, repo Repo, cfg Con
 	input.Write(manifest.NUL())
 	cmd := exec.CommandContext(ctx, "tar", "-czf", "-", "-C", repo.Root, "--null", "-T", "-")
 	cmd.Stdin = &input
+	cmd.Env = append(os.Environ(), "COPYFILE_DISABLE=1")
 	var archive bytes.Buffer
 	cmd.Stdout = &archive
 	cmd.Stderr = stderr
@@ -71,6 +73,7 @@ func syncArchive(ctx context.Context, target SSHTarget, repo Repo, workdir strin
 	input.Write(manifest.NUL())
 	cmd := exec.CommandContext(ctx, "tar", "-czf", "-", "-C", repo.Root, "--null", "-T", "-")
 	cmd.Stdin = &input
+	cmd.Env = append(os.Environ(), "COPYFILE_DISABLE=1")
 	var archive bytes.Buffer
 	cmd.Stdout = &archive
 	cmd.Stderr = stderr