@agentsdock/server 1.0.10 → 1.0.11-beta.1

package/server/claude_history_repair.py

@@ -14,6 +14,7 @@ import hashlib
 import hmac
 import json
 import os
+import time
 from pathlib import Path
 import re
 import stat
@@ -26,9 +27,13 @@ from claude_goals import ClaudeGoalHistoryNormalizer, is_claude_synthetic_no_res
 from claude_sdk_client import CLAUDE_SDK_LITERAL_MESSAGE_PREFIX
 
 
+from transcript_reader import jsonl_records, scan_check, CHUNK_BYTES, SCAN_SECONDS
+
 MAX_BYTES = 96 * 1024 * 1024
 MAX_EVENTS_BYTES = 32 * 1024 * 1024
-MAX_LINE_BYTES = 4 * 1024 * 1024
+# Bound retained JSON; opaque provider payload bytes are streamed.
+MAX_LINE_BYTES = 32 * 1024 * 1024
+MAX_TEXT_CHARS = 4 * 1024 * 1024
 MAX_RECORDS = 100_000
 MAX_KEYS = 20_000
 MAX_TARGETS = 4_000
@@ -73,24 +78,15 @@ def _records(path: Path, expected: tuple[int, int, int, int]):
         info = os.fstat(stream.fileno())
         if (info.st_dev, info.st_ino, info.st_size, info.st_mtime_ns) != expected:
             raise _Unproven()
-        count = 0
-        offset = 0
-        while offset < expected[2]:
-            line = stream.readline(min(MAX_LINE_BYTES + 1, expected[2] - offset))
-            if len(line) > MAX_LINE_BYTES or not line.endswith(b"\n"):
-                raise _Unproven()
-            count += 1
-            if count > MAX_RECORDS:
-                raise _Unproven()
-            offset += len(line)
-            event = json.loads(line)
-            if not isinstance(event, dict):
-                raise _Unproven()
-            yield event, offset, line
+        try:
+            yield from jsonl_records(stream, end=expected[2], strict=True,
+                max_records=MAX_RECORDS, max_retained_bytes=MAX_LINE_BYTES)
+        except ValueError as exc:
+            raise _Unproven() from exc
         final = os.fstat(stream.fileno())
         if (final.st_dev, final.st_ino, final.st_size, final.st_mtime_ns) != expected:
             raise _Unproven()
-    if _stamp(path) != expected:
+    if _regular_stamp(path) != expected:
         raise _Unproven()
 
 
@@ -106,7 +102,7 @@ def _target(event: dict) -> tuple[int, str, str] | None:
         event.get("type") != "turn_started" or event.get("imported") is not True
         or event.get("backend") != "claude" or type(seq) is not int or seq <= 0
         or not isinstance(run, str) or not run.startswith("import_")
-        or not isinstance(prompt, str) or len(prompt) > MAX_LINE_BYTES
+        or not isinstance(prompt, str) or len(prompt) > MAX_TEXT_CHARS
     ):
         return None
     return seq, run, _text_key(prompt)
@@ -118,7 +114,7 @@ def _assistant_target(event: dict) -> tuple | None:
     if (event.get("type") not in ("assistant_text", "reasoning_summary")
             or event.get("imported") is not True or event.get("backend") != "claude"
             or type(seq) is not int or seq <= 0 or not isinstance(run, str) or not run.startswith("import_")
-            or not isinstance(text, str) or not text.strip() or len(text) > MAX_LINE_BYTES
+            or not isinstance(text, str) or not text.strip() or len(text) > MAX_TEXT_CHARS
             or not isinstance(origin, dict) or origin.get("provider") != "claude"
             or origin.get("kind") not in (None, "assistant")
             or event.get("provider_user_authored") is True
@@ -173,7 +169,7 @@ class _AssistantReplays:
             return None
         display = self.normalize_assistant(text)
         return (_text_key(display) if isinstance(display, str) and display.strip()
-                and len(display) <= MAX_LINE_BYTES else None)
+                and len(display) <= MAX_TEXT_CHARS else None)
 
     def event(self, event: dict) -> None:
         target = _assistant_target(event)
@@ -193,7 +189,7 @@ class _AssistantReplays:
                     and (event.get("phase") in ("commentary", "final_answer")
                          or (kind == "assistant_text" and event.get("phase") is None))
                     and isinstance(event.get("text"), str) and event["text"].strip()
-                    and len(event["text"]) <= MAX_LINE_BYTES):
+                    and len(event["text"]) <= MAX_TEXT_CHARS):
                 self.native.append((event, _text_key(event["text"].strip())))
         if sum(map(len, (self.starts, self.ends, self.owners, self.native, self.candidates))) > MAX_TARGETS:
             raise _Unproven()
@@ -260,7 +256,7 @@ class _AssistantReplays:
                              and block.get("type") == "text" and isinstance(block.get("text"), str))
         else:
             return
-        if text.strip() and len(text) <= MAX_LINE_BYTES:
+        if text.strip() and len(text) <= MAX_TEXT_CHARS:
             digest = _text_key(text.strip())
             self.sources.setdefault((identity, digest), []).append(offset)
             self.source_display[(identity, digest)] = self.display_key(text)
@@ -440,7 +436,7 @@ class _AsyncDeliveryInputs:
                 or any(event.get(key) for key in ("clientUserMessageId", "clientId", "client_user_message_id", "client_id"))):
             return
         full, display = self.normalize_full_user(event), self.normalize_user(event)
-        match = _ASYNC_WRAPPER.fullmatch(full.strip()) if isinstance(full, str) and len(full) <= MAX_LINE_BYTES else None
+        match = _ASYNC_WRAPPER.fullmatch(full.strip()) if isinstance(full, str) and len(full) <= MAX_TEXT_CHARS else None
         timestamp = _timestamp(identity[2])
         if match and isinstance(display, str) and display and timestamp is not None:
             self.sources.setdefault((match[1], _text_key(match[2]), len(match[2]), int(timestamp)), []).append(
@@ -519,7 +515,7 @@ class _MailboxWakeInputs(_AsyncDeliveryInputs):
             return
         full, display = self.normalize_full_user(event), self.normalize_user(event)
         timestamp = _timestamp(identity[2])
-        if (isinstance(full, str) and full and len(full) <= MAX_LINE_BYTES
+        if (isinstance(full, str) and full and len(full) <= MAX_TEXT_CHARS
                 and _text_key(full) in self.wake_hashes
                 and isinstance(display, str) and display and timestamp is not None):
             self.sources.setdefault(_text_key(full), []).append(
@@ -631,29 +627,18 @@ def filter_native_claude_mailbox_wake_items(
                              "backend": "claude", "imported": True}
                 native.event(candidate)
                 assistant_targets[index] = _assistant_target(candidate)
-        if source_stamp[2] <= MAX_EVENTS_BYTES:
-            digest, verified = hashlib.sha256(), set()
-            for event, offset, line in _records(source, source_stamp):
-                digest.update(line)
-                if offset == start and hmac.compare_digest(digest.hexdigest(), previous):
-                    verified.add(start)
-                if offset == end and hmac.compare_digest(digest.hexdigest(), expected):
-                    verified.add(end)
-                if offset <= end:
-                    proof.source(event, offset)
-                    native.source(event, offset)
-            if end not in verified or start and start not in verified:
-                return items
-        else:
-            # Same bounded proof as historical semantic windows: the caller has
-            # just verified this checkpoint. Recheck file identity and every
-            # candidate's exact source UUID/full hash, without a prefix rescan.
-            window_start = max(0, end - MAX_EVENTS_BYTES)
-            if start < window_start:
-                return items
-            for event, offset in _bounded_records(source, source_stamp, window_start, end):
+        digest, verified = hashlib.sha256(), set()
+        for event, offset, line in _records(source, source_stamp):
+            line.update_hash(digest)
+            if offset == start and hmac.compare_digest(digest.hexdigest(), previous):
+                verified.add(start)
+            if offset == end and hmac.compare_digest(digest.hexdigest(), expected):
+                verified.add(end)
+            if offset <= end:
                 proof.source(event, offset)
                 native.source(event, offset)
+        if end not in verified or start and start not in verified:
+            return items
         eligible = {batch: (0, len(items) + 1, start, end)}
         targets, assistant_replays = proof.prove(eligible), native.prove(eligible)
         _assistants, owned_inputs = native.exact_owned_sources()
@@ -923,7 +908,7 @@ def _prove(session_id: str, provider_id: str, events: Path, root: Path,
         raise _Unproven()
     source = source.resolve(strict=True)
     source.relative_to(root.resolve(strict=True))
-    source_stamp = _stamp(source)
+    source_stamp = _regular_stamp(source)
     prefix_digests = {}
     eligible_batches = {}
     for run, (seq, checkpoint) in batches.items():
@@ -972,7 +957,7 @@ def _prove(session_id: str, provider_id: str, events: Path, root: Path,
                 scheduled_ranges.setdefault(key, []).append((run, start_time, end_time))
     scheduled_sources, scheduled_counts = {}, {}
     for event, offset, line in _records(source, source_stamp):
-        digest.update(line)
+        line.update_hash(digest)
         for wanted in prefix_digests.get(offset, ()):
             if hmac.compare_digest(digest.hexdigest(), wanted):
                 verified.add((offset, wanted))
@@ -1144,25 +1129,25 @@ def _bounded_records(path: Path, expected, start: int, end: int):
         if (info.st_dev, info.st_ino, info.st_size, info.st_mtime_ns) != expected:
             raise _Unproven()
         stream.seek(start)
+        deadline = time.monotonic() + SCAN_SECONDS
         if start:
             stream.seek(start - 1)
             if stream.read(1) != b"\n":
-                skipped = stream.readline(min(MAX_LINE_BYTES + 1, end - start))
-                if len(skipped) > MAX_LINE_BYTES or not skipped.endswith(b"\n"):
+                while stream.tell() < end:
+                    scan_check(deadline)
+                    skipped = stream.readline(min(CHUNK_BYTES, end - stream.tell()))
+                    if not skipped:
+                        raise _Unproven()
+                    if skipped.endswith(b"\n"):
+                        break
+                else:
                     raise _Unproven()
-        count = 0
-        while stream.tell() < end:
-            offset = stream.tell()
-            line = stream.readline(min(MAX_LINE_BYTES + 1, end - offset))
-            if len(line) > MAX_LINE_BYTES or not line.endswith(b"\n"):
-                raise _Unproven()
-            count += 1
-            if count > MAX_RECORDS:
-                raise _Unproven()
-            event = json.loads(line)
-            if not isinstance(event, dict):
-                raise _Unproven()
-            yield event, stream.tell()
+        try:
+            for event, offset, _raw in jsonl_records(stream, end=end, strict=True,
+                    deadline=deadline, max_records=MAX_RECORDS, max_retained_bytes=MAX_LINE_BYTES):
+                yield event, offset
+        except ValueError as exc:
+            raise _Unproven() from exc
         final = os.fstat(stream.fileno())
         if (final.st_dev, final.st_ino, final.st_size, final.st_mtime_ns) != expected:
             raise _Unproven()

package/server/codex_auth.py

@@ -22,9 +22,10 @@ MAX_API_KEY_CHARS = 4096
 AUTH_TIMEOUT_SECONDS = 30.0
 BUSY_MESSAGE = "Wait for Codex chats, goals, queued turns and Side chat requests to finish before changing authentication."
 HANDOFF_MESSAGE = (
-    "Refreshing Codex sign-in. Wait for this chat's running work, approvals, "
-    "goals and background terminals to finish, then retry. Your message has "
-    "not been sent to Codex."
+    "Codex sign-in changed or was explicitly reloaded. This chat is waiting for "
+    "its running work, approvals, goals or background terminals before switching. "
+    "Your running work has not been stopped and this message has not been sent. "
+    "Retry after that work finishes."
 )
 _REVISION_KEY = secrets.token_bytes(32)
 _MAX_AUTH_BYTES = 128 * 1024
@@ -115,8 +116,9 @@ def native_login_revision(env: dict[str, str], *, cwd: str) -> LoginRevision | N
 
     Ignore rotating access/refresh tokens and last_refresh. OIDC auth_time is
     stable across refresh but changes on an interactive authentication. Without
-    it we can detect an account switch, not prove a same-account re-login;
-    Recheck CLIs provides an explicit handoff for that case and keyring stores.
+    it we can detect an account switch, not prove a same-account re-login.
+    Explicit native-admin reload can hand off opaque/keyring logins; an
+    unchanged known revision remains observational even on explicit reload.
     Missing/malformed files are not evidence of a new login. No secret survives
     this bounded read except a process-keyed comparison digest.
     """
@@ -209,7 +211,7 @@ async def read_account(manager) -> dict:
     return account_summary(result)
 
 
-def create_router(*, authorize, operation, available) -> APIRouter:
+def create_router(*, authorize, operation, available, reload_login=None) -> APIRouter:
     router = APIRouter()
 
     @router.get("/api/admin/codex/auth")
@@ -227,7 +229,26 @@ def create_router(*, authorize, operation, available) -> APIRouter:
             raise
         except Exception:
             raise HTTPException(503, "Codex authentication status is unavailable.") from None
-        return JSONResponse(result, headers={"Cache-Control": "no-store"})
+        return JSONResponse({**result, "login_reload_available": reload_login is not None},
+                            headers={"Cache-Control": "no-store"})
+
+    @router.post("/api/admin/codex/auth/reload")
+    async def reload(request: Request):
+        authorize(request)
+        if not available() or reload_login is None:
+            raise HTTPException(501, "Native Codex sign-in reload is unavailable.")
+        # No credential input; no handoff from GET, mounting a page or polling.
+        try:
+            body = await request.json()
+        except ValueError:
+            raise HTTPException(400, "Send an empty JSON object to reload Codex sign-in.") from None
+        if body != {}:
+            raise HTTPException(400, "Send an empty JSON object to reload Codex sign-in.")
+        pending = await reload_login()
+        response = await status(request)
+        result = json.loads(response.body)
+        return JSONResponse({**result, "login_reload_pending": pending},
+                            headers={"Cache-Control": "no-store"})
 
     @router.post("/api/admin/codex/auth/api-key")
     async def login(request: Request):

package/server/codex_history_repair.py

@@ -26,6 +26,8 @@ from claude_history_repair import (
 )
 
 
+from transcript_reader import jsonl_records
+
 MAX_PRIOR_SOURCE_PATHS = 2
 MAX_AGGREGATE_SOURCE_BYTES = 96 * 1024 * 1024
 MAX_AGGREGATE_SOURCE_RECORDS = 100_000
@@ -34,7 +36,9 @@ _PROVIDER_ID = re.compile(r"[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9
 _NATIVE_LEADING_DECORATION_RE = re.compile(
     r"(?m)^[ \t]*(?:(?::[A-Za-z0-9_+\-]+:|[\U0001F300-\U0001FAFF\u2600-\u27BF]\ufe0f?)[ \t]*)+"
 )
-NATIVE_PROOF_LINE_BYTES = 4 * 1024 * 1024
+# Bound retained JSON; opaque provider payload bytes are streamed.
+NATIVE_PROOF_LINE_BYTES = 32 * 1024 * 1024
+NATIVE_PROOF_TEXT_CHARS = 4 * 1024 * 1024
 NATIVE_PROOF_SECONDS = 30.0
 _COMPACTION_PREFIX = (
     "Another language model started to solve this problem and produced a summary of its thinking process. "
@@ -70,7 +74,7 @@ class CodexCompactionSummaryTracker:
                 and isinstance(metadata, dict) and metadata.get("content_item_kinds") == ["unknown"]
                 and isinstance(content, list) and len(content) == 1 and isinstance(content[0], dict)
                 and content[0].get("type") == "output_text" and isinstance(content[0].get("text"), str)
-                and 0 < len(content[0]["text"]) <= NATIVE_PROOF_LINE_BYTES):
+                and 0 < len(content[0]["text"]) <= NATIVE_PROOF_TEXT_CHARS):
                 self.pending = {"origin": origin, "text": content[0]["text"], "response_id": None}
             return None
         pending = self.pending
@@ -174,24 +178,20 @@ def _native_records(path: Path, expected: tuple[int, int, int, int], budget: _Na
         info = os.fstat(stream.fileno())
         if not stat.S_ISREG(info.st_mode) or (info.st_dev, info.st_ino, info.st_size, info.st_mtime_ns) != expected:
             raise _Unproven()
-        offset = 0
-        while offset < boundary:
+        def cancelled():
             budget.check()
-            line = stream.readline(min(NATIVE_PROOF_LINE_BYTES + 1, boundary - offset))
-            if not line or len(line) > NATIVE_PROOF_LINE_BYTES or not line.endswith(b"\n"):
-                raise _Unproven()
-            offset += len(line)
-            try:
-                record = json.loads(line)
-            except (ValueError, UnicodeDecodeError):
-                if not provider_source:
-                    raise
-                # The provider importer skips malformed records. Their exact
-                # bytes still participate in the checkpoint digest below.
-                record = {}
-            if not isinstance(record, dict):
-                raise _Unproven()
-            yield record, offset, line
+            return False
+        try:
+            for record, offset, raw in jsonl_records(stream, end=boundary,
+                    strict=not provider_source, project=provider_source,
+                    max_retained_bytes=NATIVE_PROOF_LINE_BYTES, cancelled=cancelled):
+                if record is None and not raw.malformed:
+                    raise _Unproven()  # Valid non-object JSON cannot substantiate native proof.
+                yield record or {}, offset, raw
+        except CodexNativeHistoryProofUnavailable:
+            raise
+        except ValueError as exc:
+            raise _Unproven() from exc
         info = os.fstat(stream.fileno())
         if (info.st_dev, info.st_ino, info.st_size, info.st_mtime_ns) != expected:
             raise _Unproven()
@@ -436,7 +436,7 @@ def _prove_source(provider_id: str, source: Path, root: Path,
         elif event.get("type") == "session_meta":
             if not isinstance(payload, dict) or payload.get("id") != provider_id:
                 raise _Unproven()
-        digest.update(line)
+        line.update_hash(digest)
         for expected in wanted.get(offset, ()):
             if hmac.compare_digest(digest.hexdigest(), expected):
                 verified.add((offset, expected))
@@ -654,7 +654,7 @@ _ASYNC_DELIVERY_WRAPPER = re.compile(
 
 def _async_delivery_body(text: str) -> tuple[str, str, int] | None:
     """Parse one complete legacy wire shape; text alone never proves delivery."""
-    if len(text) > NATIVE_PROOF_LINE_BYTES:
+    if len(text) > NATIVE_PROOF_TEXT_CHARS:
         return None
     match = _ASYNC_DELIVERY_WRAPPER.fullmatch(text)
     if not match:
@@ -735,7 +735,7 @@ class _AsyncDeliveryIndex:
         if isinstance(run, str) and 0 < len(run) <= 256 and not run.startswith("import_"):
             if event_type == "turn_started":
                 body = event.get("prompt")
-                if isinstance(body, str) and 0 < len(body) <= NATIVE_PROOF_LINE_BYTES and not _runtime_human_provenance(event):
+                if isinstance(body, str) and 0 < len(body) <= NATIVE_PROOF_TEXT_CHARS and not _runtime_human_provenance(event):
                     record.update(body_key=_text_key(body), body_chars=len(body))
                 self.starts.setdefault(run, []).append(record)
                 self.count += 1
@@ -987,7 +987,7 @@ def _prove_native_source(thread: str, source: Path, root: Path, batches: dict, c
                 raise _Unproven()
             if parent is not None:
                 allowed_header_owners.add(parent)
-        digest.update(line)
+        line.update_hash(digest)
         for expected in wanted.get(offset, ()):
             if hmac.compare_digest(digest.hexdigest(), expected):
                 verified.add((offset, expected))

package/server/install.sh

@@ -1839,7 +1839,7 @@ if [[ "$TEAM_HUB_MODE" == "host" && "$TEAM_HUB_OPERATION_PENDING" != "true" \
   fi
 fi
 
-RELEASE_FILES=(activation_transaction.py execution_activation.py execution_legacy_runner.py execution_preparation.py update_preparation.py update_handoff.py update_recovery.py execution_update_status.py execution_uninstall.py execution_recovery.py execution_recovery_status.py execution_http.py execution_durability.py execution_control.py execution_install.py execution_maintenance.py execution_manage.py execution_ownership.py execution_service.py execution_transport.py agent_server.py local_session_ownership.py cursor_history.py workspace_git.py team_hub_host.py secure_peer_runtime.py team_mail_runtime.py team_mail_websocket.py team_mail_grants.py secure_peer_delivery.py agentsdock_jobs.py agentsdock_chats.py chat_mailbox.py agentsdock_emergency.py agentsdock_publish.py agentsdock_mail.py agentsdock_team.py provider_commands.py provider_usage.py claude_sdk_client.py claude_model_catalog.py claude_goals.py claude_background_reconciliation.py codex_app_server.py codex_auth.py codex_provider.py codex_response_stream.py provider_connections.py cursor_api_key.py side_questions.py title_generation.py codex_side_question.py codex_side_chat_progress.py claude_side_question.py cursor_agent_client.py cursor_provider_mcp.py opencode_agent_client.py cursor_process_guard.py claude_history_repair.py claude_history_provenance.py codex_history_repair.py public_chat_shares.py public_chat_transcript.py public_chat_share_routes.py interactive_chat_shares.py interactive_chat_share_routes.py interactive_chat_share_web.py interactive_chat_projection.py interactive_chat_runtime.py interactive_chat_native.py shared_chat_videos.py shared_chat_video_stream.py interactive_chat_controls.py install.sh uninstall.sh instances.sh server_instances.py update_runner.py pyproject.toml uv.lock VERSION release-public-key.pem LICENSE NOTICE)
+RELEASE_FILES=(activation_transaction.py execution_activation.py execution_legacy_runner.py execution_preparation.py update_preparation.py update_handoff.py update_recovery.py execution_update_status.py execution_uninstall.py execution_recovery.py execution_recovery_status.py execution_http.py execution_durability.py execution_control.py execution_install.py execution_maintenance.py execution_manage.py execution_ownership.py execution_service.py execution_transport.py agent_server.py local_session_ownership.py cursor_history.py workspace_git.py team_hub_host.py secure_peer_runtime.py team_mail_runtime.py team_mail_websocket.py team_mail_grants.py secure_peer_delivery.py agentsdock_jobs.py agentsdock_chats.py chat_mailbox.py agentsdock_emergency.py agentsdock_publish.py agentsdock_mail.py agentsdock_team.py provider_commands.py provider_usage.py claude_sdk_client.py claude_model_catalog.py claude_goals.py claude_background_reconciliation.py codex_app_server.py codex_auth.py codex_provider.py codex_response_stream.py provider_connections.py cursor_api_key.py side_questions.py title_generation.py codex_side_question.py codex_side_chat_progress.py claude_side_question.py cursor_agent_client.py cursor_provider_mcp.py opencode_agent_client.py cursor_process_guard.py transcript_reader.py claude_history_repair.py claude_history_provenance.py codex_history_repair.py public_chat_shares.py public_chat_transcript.py public_chat_share_routes.py interactive_chat_shares.py interactive_chat_share_routes.py interactive_chat_share_web.py interactive_chat_projection.py interactive_chat_runtime.py interactive_chat_native.py shared_chat_videos.py shared_chat_video_stream.py interactive_chat_controls.py install.sh uninstall.sh instances.sh server_instances.py update_runner.py pyproject.toml uv.lock VERSION release-public-key.pem LICENSE NOTICE)
 RELEASE_DIRECTORIES=(agentsdock_team_hub)
 TEAM_HUB_RELEASE_FILES=(
   __init__.py
@@ -3763,6 +3763,7 @@ validate_staged_release_runtime() (
     "$STAGE_DIR/cursor_provider_mcp.py" \
     "$STAGE_DIR/opencode_agent_client.py" \
     "$STAGE_DIR/cursor_process_guard.py" \
+    "$STAGE_DIR/transcript_reader.py" \
     "$STAGE_DIR/claude_history_repair.py" \
     "$STAGE_DIR/claude_history_provenance.py" \
     "$STAGE_DIR/codex_history_repair.py" \
@@ -3781,7 +3782,7 @@ validate_staged_release_runtime() (
     "$STAGE_DIR/update_runner.py"
   "$STAGE_DIR/.venv/bin/python" -m py_compile "$STAGE_DIR/server_instances.py"
   "$STAGE_DIR/.venv/bin/python" -m compileall -q "$STAGE_DIR/agentsdock_team_hub"
-  PYTHONPATH="$STAGE_DIR" "$STAGE_DIR/.venv/bin/python" -c 'import execution_activation, execution_preparation, update_preparation, update_handoff, update_recovery, execution_update_status, execution_uninstall, execution_recovery, execution_recovery_status, execution_http, execution_durability, execution_control, execution_install, execution_maintenance, execution_manage, execution_ownership, execution_service, execution_transport; import workspace_git, claude_model_catalog, server_instances, local_session_ownership, cursor_history; import codex_auth, codex_provider, codex_response_stream, provider_connections, cursor_api_key, side_questions, title_generation, codex_side_question, codex_side_chat_progress, claude_side_question, agentsdock_team_hub, cursor_agent_client, cursor_provider_mcp, opencode_agent_client, cursor_process_guard, secure_peer_delivery, secure_peer_runtime, team_mail_runtime, team_mail_websocket, team_mail_grants, team_hub_host, agentsdock_mail, agentsdock_team, claude_history_repair, claude_history_provenance, claude_goals, claude_background_reconciliation, codex_history_repair, public_chat_shares, public_chat_transcript, public_chat_share_routes, interactive_chat_shares, interactive_chat_share_routes, interactive_chat_share_web, interactive_chat_projection, interactive_chat_runtime, interactive_chat_native, shared_chat_videos, shared_chat_video_stream, interactive_chat_controls, chat_mailbox, provider_commands, provider_usage; from agentsdock_team_hub import secure_peer, secure_peer_hub' >/dev/null
+  PYTHONPATH="$STAGE_DIR" "$STAGE_DIR/.venv/bin/python" -c 'import execution_activation, execution_preparation, update_preparation, update_handoff, update_recovery, execution_update_status, execution_uninstall, execution_recovery, execution_recovery_status, execution_http, execution_durability, execution_control, execution_install, execution_maintenance, execution_manage, execution_ownership, execution_service, execution_transport; import workspace_git, claude_model_catalog, server_instances, local_session_ownership, cursor_history; import codex_auth, codex_provider, transcript_reader, codex_response_stream, provider_connections, cursor_api_key, side_questions, title_generation, codex_side_question, codex_side_chat_progress, claude_side_question, agentsdock_team_hub, cursor_agent_client, cursor_provider_mcp, opencode_agent_client, cursor_process_guard, secure_peer_delivery, secure_peer_runtime, team_mail_runtime, team_mail_websocket, team_mail_grants, team_hub_host, agentsdock_mail, agentsdock_team, claude_history_repair, claude_history_provenance, claude_goals, claude_background_reconciliation, codex_history_repair, public_chat_shares, public_chat_transcript, public_chat_share_routes, interactive_chat_shares, interactive_chat_share_routes, interactive_chat_share_web, interactive_chat_projection, interactive_chat_runtime, interactive_chat_native, shared_chat_videos, shared_chat_video_stream, interactive_chat_controls, chat_mailbox, provider_commands, provider_usage; from agentsdock_team_hub import secure_peer, secure_peer_hub' >/dev/null
 )
 
 abort_unclaimed_team_hub_reactivation() {

package/server/server_instances.py

@@ -587,6 +587,20 @@ def describe(instance: Instance) -> dict:
     }
 
 
+def pairing_info(instance: Instance) -> dict:
+    """Private pipe to the CLI QR renderer; never write these details to logs."""
+    for target in (instance.config, instance.config / "env"):
+        check_path(target, instance.home)
+    env = read_config(instance)
+    token = env.get("AGENTSDOCK_AGENT_TOKEN", "")
+    if not token or any(ord(char) < 32 or ord(char) == 127 for char in token):
+        raise ValueError("This instance has no usable saved access token.")
+    port = int(env.get("AGENTSDOCK_AGENT_PORT", "7850"))
+    bind = env.get("AGENTSDOCK_AGENT_BIND", "0.0.0.0")
+    choices = connection_choices(bind, port, candidate_addresses(bind, port), tailscale_status())
+    return {"name": instance.name, "accessToken": token, "choices": choices}
+
+
 def connection_choices(bind: str, port: int, addresses: list[str], network: dict[str, str]) -> dict:
     """Label candidates, never infer Tailscale connectivity from an IP range."""
     choices = {"local": [], "lan": [], "other": [], "tailscale": "", "tailscale_note": ""}
@@ -941,6 +955,8 @@ def parser() -> argparse.ArgumentParser:
     commands.add_parser("token", help="Choose an existing server and display only its access token")
     info = commands.add_parser("info")
     info.add_argument("name", type=instance_name)
+    pairing = commands.add_parser("_pair-info", help=argparse.SUPPRESS)
+    pairing.add_argument("name", type=instance_name)
     status = commands.add_parser("status", help="Show readable details for all instances or one name")
     status.add_argument("name", nargs="?", type=instance_name)
     new = commands.add_parser("new")
@@ -979,6 +995,12 @@ def main(argv: list[str] | None = None) -> int:
             validate_binding(instance)
             print(instance.shell_bindings())
             return 0
+        if args.command == "_pair-info":
+            selected = next((item for item in registry.instances() if item.name == args.name), None)
+            if selected is None:
+                raise ValueError("Unknown instance. Use agentsdock list.")
+            print(json.dumps(pairing_info(selected)))
+            return 0
         if args.command == "token":
             selected = choose_token_instance(registry)
             if selected is None: